The meteoric rise of generative AI tools, particularly ChatGPT, has brought both excitement and caution into the workplace. Within just two months of its launch on November 30, 2022, ChatGPT garnered over 100 million downloads, a number likely to grow as publicity and awareness increase. This surge in adoption signifies a pivotal moment for businesses, highlighting both opportunities and risks associated with the use of generative AI technologies.

Benefits and Risks of Generative AI

Generative AI offers significant potential for improving efficiency and innovation in various business processes. These tools can automate mundane tasks, generate creative content, and provide valuable insights from large data sets. However, they also come with inherent risks. The most prominent concerns include the possibility of AI 'hallucinating' or generating inaccurate information, the opacity of AI decision-making processes, and issues surrounding the source data used for training these models.

A critical risk is the potential for employees to input commercially sensitive or proprietary data into these tools. This can inadvertently lead to data breaches or the misuse of confidential information. Additionally, using AI-generated content in business communications poses the risk of propagating inaccuracies or biases inherent in the AI's outputs.

Establishing Clear Policies and Controls

To mitigate these risks, employers must establish clear policies regarding the use of generative AI in the workplace. These policies should delineate whether the use of such technologies is permitted and, if so, under what conditions. Employers can achieve this by introducing specific generative AI policies, updating existing IT and social media policies, or issuing a dedicated statement to employees.

It is crucial that these policies address the following points:

1. Prohibit the input of commercially sensitive or proprietary data into generative AI tools.
2. Ensure that third-party confidential information is not input into AI tools without proper authorisation.
3. Regulate the use of AI-generated outputs in official business communications to avoid potential inaccuracies and legal liabilities.

Legal Risks

The integration of generative AI into workplace operations introduces several legal risks that employers must be vigilant about. Key legal risks include:

1. Data Privacy and Protection: Generative AI systems often require significant amounts of data, some of which may be personal or sensitive. The use of such data without appropriate consent or safeguards can lead to violations of data protection laws, such as the General Data Protection Regulation (GDPR) in the EU or the California Consumer Privacy Act (CCPA) in the US. Employers must ensure that any data used complies with relevant privacy laws and that adequate measures are in place to protect this data from unauthorised access or misuse.
2. Intellectual Property: Generative AI tools can create outputs based on the data they are trained on, which may include copyrighted material. This raises questions about the ownership and use of AI-generated content. Employers need to be aware of the intellectual property implications and ensure that they have the right to use, modify, and distribute AI-generated content without infringing on third-party rights.
3. Discrimination and Bias: AI systems can inadvertently perpetuate or amplify biases present in their training data. This can lead to discriminatory practices, particularly in recruitment and employment decisions. For instance, if an AI tool is used to screen job applicants, it might favour certain demographics over others based on biased training data. Employers could face legal challenges if AI-driven decisions are found to be discriminatory.
4. Liability for Decisions: Determining liability for decisions made using AI tools can be complex, especially when multiple parties are involved in the development and deployment of the AI system. Employers might find themselves held accountable for decisions made by AI, even if the fault lies with the AI developers or data providers. Ensuring clear contractual terms with AI suppliers, including warranties and indemnities, is crucial to mitigate these risks.
5. Transparency and Accountability: The 'black box' nature of many AI systems makes it difficult to understand and explain their decision-making processes. This lack of transparency can lead to challenges in accountability, particularly if AI decisions result in adverse outcomes for employees or applicants. Employers must ensure that AI systems are explainable and that they can provide clear justifications for AI-driven decisions.

Liability and Accountability

Determining liability for unlawful AI decision-making in an employment context is complex due to the multiple parties involved in the AI supply chain. These parties include the AI developers, the suppliers of the training data, the employers who integrate AI into their processes, and the individuals who use the AI outputs to make decisions.

The 'black box' nature of many AI systems, particularly those based on deep learning, exacerbates this issue. These systems often lack transparency, making it difficult to understand how decisions are made. Consequently, it can be challenging to identify the root cause of any discriminatory outcomes and to hold the appropriate party accountable.

Employers must conduct thorough due diligence on any AI systems they plan to deploy. This involves involving departments such as IT, HR, and legal to ensure the AI systems comply with relevant equality laws, especially if the systems were developed and tested in different jurisdictions. Employers should also seek contractual protections, such as warranties and indemnities from AI suppliers, to cover potential legal claims arising from AI-driven decisions.

Practical Steps for Compliance

The integration of AI into workplace operations is inevitable, but employers must take proactive steps to ensure compliance with evolving regulations and to mitigate potential risks. Key steps include:

1. Testing and Validation: Employers should run AI tools in parallel with human decision-making processes to identify any discrepancies and address potential biases.
2. Human Oversight: Implementing 'human-in-the-loop' systems can help ensure that AI recommendations are reviewed and validated by human decision-makers.
3. Data Scrutiny: Employers should scrutinise the training data used by AI tools, asking suppliers to explain how the data was selected and what measures were taken to prevent discrimination.
4. Transparency and Communication: Employers should inform employees about how AI is being used in the workplace and ensure that data privacy notices are updated accordingly.
5. Monitoring Legislation: Staying abreast of new AI regulations, such as the EU's proposed AI Act, is essential for compliance.
6. Documentation: Maintaining thorough records of AI system evaluations, challenges posed to AI suppliers, and any testing conducted will provide essential evidence in case of legal disputes.

Conclusion

The integration of generative AI in the workplace offers a blend of opportunities and challenges. While AI can drive efficiency and innovation, it also necessitates careful management to avoid legal pitfalls and ethical concerns. Employers must balance the benefits of AI with the need for robust policies, thorough due diligence, and ongoing compliance with regulatory developments. By doing so, they can harness the power of AI while safeguarding their business and employees from potential risks.

If you would like to discuss generative AI in the workplace in more detail, please contact us here.