The 10 Things All Employers Must Include in Any Workplace AI Policy

Whether your organization has deployed a generative AI tool for your employees or hasn’t (yet) hopped on the bandwagon, the time is now for you to create a workplace policy governing the use of the technology. Many organizations are exploring ways their workforces can harness the revolutionary advances in productivity, efficiency, and creativity that generative AI (GenAI) products like ChatGPT, Google’s Bard, or Microsoft’s Bing can bring. And, even if you aren’t doing the same, your employees almost certainly are. But how can you do so in a responsible way? A first step is developing a workplace GenAI policy. Read on for the 10 things you should include.

First Things First: What is GenAI?

Recent advances in GenAI, kicked off most prolifically by the release of ChatGPT and soon thereafter joined by Bard and the reformulated Bing, have captured the attention of a broad audience. Almost immediately, employees and employers alike began thinking about the ways the technology can be used in the workplace, seemingly limited only by our imaginations. How is this different, however, than other forms of AI which have been around for years?

You’ve probably been living and working with some form of AI for some time now. Does your company have any sort of chatbot providing answers to simple questions about where to find a resource? No doubt you have an auto-complete feature when you type into your email platform. Those are all examples of artificial intelligence – just in rudimentary form.

Unlike this prior technology, GenAI is able to generate original human-like output and expressions in addition to describing or interpreting existing information. In other words, it appears to “think” and respond like a human. However, GenAI is limited by the data upon which it was trained, and will not have the judgment, strategic thinking, or contextual knowledge that a human does. These and other technological limitations and risks are why having a sound GenAI policy is so important.

The 10 Components Your GenAI Policy Should Include

While each company should customize a GenAI policy to suit its own needs and priorities, there are 10 topics to consider at a bare minimum. 

1. Outline the Policy’s Purpose and Scope. The first thing your policy should include is a description of its purpose and scope.
   • Generally, the purpose of the policy would be to provide guidelines for the organization’s development, implementation, use, and monitoring of GenAI in the workplace.
   • The scope should clearly tell your employees which areas are covered – and here’s where you need to be very clear. If your organization does not provide any GenAI products for your employees, you still need to make clear that the policy covers the use of any third-party or publicly available GenAI tool, such as ChatGPT, Bard, Bing, DALL-E, Midjourney, and other similar applications that mimic human intelligence to generate answers, work product, or perform certain tasks. And, if you do supply your workers with a GenAI product, you should make sure your policy covers appropriate usage with specific circumstances kept in mind.
2. Maintain Data Privacy and Security. Data privacy and security is a critical component of any GenAI policy, particularly given the strict data privacy laws that exist and are developing across the country (and internationally). Your policy should create safeguards to protect the data inputted into any GenAI technology, addressing data collection, storage, and sharing. At a minimum, you should prohibit your employees from entering private or personal information into any GenAI platform.
3. Uphold Company Confidentiality. You will also want to ensure that your company’s most important data – trade secrets, private information, PII of your employees and other third parties, confidential data, sensitive matters, etc. – are kept far away from GenAI. This will not only help you avoid embarrassing or damaging situations, but could help you uphold and defend the confidential nature of this information if you ever find yourself in trade secrets litigation.
4. Ensure Your Commitment to Diversity is Not Compromised. GenAI has the capacity to provide information that violates not only your company’s strong diversity goals but also legal anti-discrimination standards. For this reason, you should plainly state that information received from GenAI needs to be double-checked using reasoned human judgment to ensure it does not run afoul of your company’s commitment to diversity.
5. Prohibit Employment-Based Decisions Aided by GenAI. Related to the previous point, you should clearly state that GenAI tools should not be used to make or help you make employment decisions about applicants or employees. This includes recruitment, hiring, retention, promotions, transfers, performance monitoring, discipline, demotion, terminations, or other decisions. Of course, if you have deployed a GenAI tool to help you navigate human resources activity, you can allow such use – so long as you are confident that your policies surrounding the use of that specific tool uphold legal principles (including any relevant state laws) and your highest company standards.
6. Prevent Copyright or Other Theft Concerns. The danger always exists that information provided from GenAI platforms (including image generators like DALL-E 2 and Midjourney) could include details from copyrighted or other protected sources. If your employees use a GenAI tool to generate content for company use that happens to include information from a protected source, you could find yourself in legal hot water. Make sure your employees know not to pass off any information or content received from GenAI as their own without double-checking sources. They should use GenAI as an idea generator, not as a replacement for content creation.
7. Outline Best Practices. The inherent limitations related to GenAI in its current form should lead you to outline best practices that should be followed whenever your employees use the technology to aid their work. Some examples:
   • Because GenAI is prone to providing hallucinations and outdated answers, you should require your workers to confirm any information received before relying on it in any capacity.
   • There is always risk of a data breach involving any GenAI provider. While your workers might think they can input any question into the system with complete anonymity, they should be warned to treat any information provided into any GenAI platform as if it will go viral on the Internet –with their name and your company’s identity along with it.
   • Your company’s supervisors should want to know when – and to what extent – GenAI was used to help complete a task. For that reason, you might recommend that employees disclose when they are using the technology and the extent it aided the creation of any content they develop.
8. Be Clear About Consequences. As with any company policy, you should inform your employees that they could face repercussions should they violate any of its tenets. Let them know they could face disciplinary action – up to and including immediate termination, and possibly legal action – should they violate the policy. The policy should also direct employees to report potential violations they learn about to their supervisor or to HR.
9. Include a Disclaimer. Due to the broad reach of the National Labor Relations Act – even over companies that don’t have a unionized workforce – you need to make sure that you offer protections for behavior that has been upheld as protected by the NLRB and courts. Work with your legal counsel to create a disclaimer that clearly states your policy is not intended to interfere with, restrain, or prevent employee communications regarding the rights protected by federal labor law.
10. Input From Across the Spectrum. Finally, make sure you include multi-disciplinary input from stakeholders across the organization to ensure your policy is comprehensive, effective, and realistic. Obvious stakeholders include members of your regulatory, compliance, IT, DEI, and legal departments.

What’s Next?

Once you publish your GenAI policy, your work is not over – it’s just beginning. Besides the all-important work of training your workforce on the policy parameters and ensuring continued and consistent enforcement, you should use the creation of a policy as the right time to establish a framework for GenAI governance and oversight.

Please let us know if you would like a copy of a complimentary GenAI policy provided courtesy of Fisher Phillips LLP.

Beyond Job Descriptions: 6 HR Tasks ChatGPT Can Do for You

Since ChatGPT’s launch in November 2022, many HR professionals have used the generative artificial intelligence tool to perform some of their daily tasks. While anxiety remains about “robots taking our jobs,” ChatGPT can make HR professionals more productive, freeing them up from repetitive tasks and allowing them to spend more time on strategic work. However it still needs to be used selectively and with caution to avoid a costly mistake.

ChatGPT as an HR Tool

Like any emerging technology, ChatGPT offers both benefits and risks. Using it effectively requires a willingness to learn and experiment. “ChatGPT saves me hours of work every week and boosts my productivity,” said Declan Daly, managing partner at Bundoran Group, a recruitment agency. “I’m constantly discovering new ways to use it in my work.” 

Caroline Reidy, managing director of The HR Suite, an HR services firm, shares Daly’s enthusiasm for ChatGPT: “You might not get perfect results every time you use it, but generating a quick, working draft with ChatGPT can significantly reduce the time you spend on document development and other administrative tasks.”

However, relying uncritically on ChatGPT without performing a careful, human review of its generated content has some large potential risks. ChatGPT’s generated content may sound reliable, but it’s also generic and historical. Generative AI can synthesize what others may have said in the past, but it can’t offer specific guidance about what your company should do now in a specific circumstance. Organizations will always need HR professionals who can do their own thinking.

Common HR Tasks ChatGPT Can Perform

People are already paying attention to ChatGPT for its ability to write job descriptions. LinkedIn, for example, just announced it will soon introduce a feature enabling AI-written job posts. Here are six other HR tasks the tool can help HR professionals perform:

1. Recruiting. “You can use ChatGPT to generate relevant interview questions to ask candidates for roles you aren’t familiar with.You can also ask for the average salary for specific jobs or common benefits that are offered by other industries for a particular role, narrowed down by geography.

2. Onboarding. HR professionals can set up ChatGPT to give real-time support to new hires by answering questions about company policies, procedures and benefits, as well as offer them guidance on completing necessary paperwork.

3. Administrative tasks. ChatGPT can help HR professionals craft and send announcements and reminders to employees about events, such as training programs. The AI tool can also be used to write all sorts of documents (from handbooks to policy memos and beyond), as well as send automatic e-mail responses.

4. Employee self-service. ChatGPT can be leveraged to build conversational chatbots, providing instant support for common questions about benefits, vacation policies and payroll. More complex employee issues can be escalated from self-service tools to an HR professional for follow-up. The human follow-up could be blended with ChatGPT as well.

5. Employee surveys. You can ask ChatGPT to craft survey questions for measuring employee engagement. ChatGPT enables you to conduct companywide polls to gauge opinions on specific workplace issues, such as the pros and cons of hybrid work and the viability of a four-day workweek.

6. Performance reviews. ChatGPT can help with performance management by supplying HR professionals and managers with instructions on how to conduct performance appraisals and by responding to inquiries from employees about performance metrics.

Maximizing ChatGPT’s Benefits, Reducing Risks 

ChatGPT’s generated content comes from the Internet and can be inaccurate or biased. For example, if the source data ChatGPT scours through says “The moon is made of yellow cheese,” its generated content would reflect that. HR professionals can provide ChatGPT with detailed source information, including employee data, internal company knowledge bases and HR policies or procedures, to generate customized content and answer questions.

Another challenge in using ChatGPT is that generated content can have the wrong tone. “As an HR professional, you sometimes work on sensitive topics where automating replies might work against you,” said Ryan Faber, founder of Copymatic, an AI-based business writing platform. “Sensitive tasks such as layoffs and terminations should never be handed over to ChatGPT, because human empathy and nuance are required.”

Finally, the generated content might not comply with data privacy or other legal standards in HR. Again, be sure to review what ChatGPT writes to make sure the content is useable and compliant.

Trust, But Verify

What former President Ronald Reagan once said about negotiating with the Soviet Union also applies to using ChatGPT: “Trust, but verify.” Many HR professionals recommend using ChatGPT as a starting point, but would still speak to an expert or refer to another data source for verification of what the tool generates. 

Being able to use ChatGPT effectively, and with the right safeguards and controls in place, will become an essential HR skill moving forward. It will take some time for HR professionals and organizations to become good at using the tool.

At the end of the day, ChatGPT is an important HR tool that should be deployed critically and selectively for HR tasks, with a clear-eyed understanding of its strengths and weaknesses.