Can You Use AI to Screen Applicants in California?

What should you check before you act?

If your organization is considering California AI hiring, the first question is not whether a vendor says its tool is compliant. It is whether the rules actually apply to your intended use, users and decisions. A focused assessment starts with the facts that determine the relevant legal test.

This guide is intended for employers, hr teams and recruiting-software providers. It offers a decision framework and primary references; it does not provide an individual legal opinion or guarantee a business outcome.

What might a California AI hiring workflow and evidence review include?

A defined documentary review, if the relevant professional capability is available and the engagement is accepted, may examine automated employment decisions, applicant rights and regulated data. The scope should be agreed from the business facts before anyone describes a legal or technical conclusion.

• Initial fact and intended-use questionnaire
• Applicable primary-source and exception mapping
• Evidence and supplier-information request list
• Decision and risk matrix with unresolved questions
• Action owners and practical next-review triggers

Have a specific business question? Describe the tool and decision you need to make. Do not send confidential records in an initial message.

From your business question to a reviewable action plan

1. Define: identify the system, owner, users and relevant location.
2. Check: match the facts against the controlling rule or published standard.
3. Document: identify evidence, supplier dependencies and unresolved questions.
4. Act: allocate proportionate changes and appropriate professional referrals.

The process is a proposed structure for assessment, not a claim that a particular service has already been commissioned, performed or validated for your organization.

What should employers, hr teams and recruiting-software providers verify?

This research is organized around automated employment decisions, applicant rights and regulated data. It distinguishes a legal rule or published standard from a proposed internal control, and it does not assume that the same answer applies to every organization. Each recommendation below should be tested against the actual use case, competent authority, provider arrangement and currently operative text.

Which California rules matter to AI hiring?

California’s Civil Rights Department regulations concerning automated-decision systems took effect October 1, 2025. They clarify how existing employment discrimination rules apply when employers use automated systems. The privacy agency’s separate ADMT regulations govern certain significant decisions by covered businesses, with relevant requirements beginning January 1, 2027. These legal sources should be mapped separately rather than described as one universal AI hiring licence.

Legal test: Identify the statutory or published-standard provision and record whether the relevant condition is satisfied, not satisfied or unclear. Describe the product configuration that supports the finding. If the cited material is guidance rather than binding law, label that distinction explicitly.

What kind of hiring process is being screened?

Record whether the tool ranks resumes, evaluates interviews, suggests job matches or makes a decision that substantially affects hiring or promotion. Describe what a human reviewer sees and how recommendations influence the final result. Tools used to schedule interviews have a different factual profile from tools that assign applicant scores. The vendor’s marketing label is less useful than observation of the actual workflow.

User decision: Record the specific decision a business owner must make, who is affected, and what changes if the answer is yes rather than no. Avoid converting a broad information query into a promise of a predetermined legal outcome.

Why are job criteria and training data relevant?

A system may rely on previous employee outcomes, educational history, employment gaps, location or other proxies. Employers should consider whether these features create differential treatment or exclusion of protected groups. A vendor-provided fairness statement does not establish that the employer’s deployment is appropriate for its own positions. Compare the tool against job-related criteria and document sources of bias.

Risk boundary: Review reasonably foreseeable failure scenarios, including inaccurate outputs, access to sensitive information and unexpected use of the tool. Determine which risks are within the narrow question addressed by this guide and which require another professional review.

How should disability and accommodation issues be treated?

Automated questions, tests and games can engage disability-discrimination rules and may function like medical inquiries depending on design. Candidates may need a workable route to request accommodation or alternative assessment. Map each stage at which a person could be screened out and how the employer identifies an access barrier. Do not assume an after-the-fact appeal is always an adequate substitute for appropriate review.

Source evidence: Keep a dated copy of the relevant official publication or applicable rule, plus a pointer to the product record used for assessment. Record any exceptions and unresolved facts; an unattributed checklist should not be treated as proof of legal compliance.

What do California privacy rules add?

Some businesses will also need to assess automated decisionmaking under the CCPA regime, considering the statutory definitions, covered business status and whether the technology makes significant decisions. Required notices, rights and assessments depend on the actual rule and timing. Keep privacy obligations distinct from employment antidiscrimination duties; one may apply even when the other does not.

Implementation check: Test a real user or employee workflow rather than relying only on product documentation. Note any user prompts, notice screens, approval steps, logs or fallback procedures that show how the control actually functions.

What records should an employer preserve?

Maintain job descriptions, selection criteria, vendor instructions, assessments of training and input data, candidate notices, accommodation processes and testing or monitoring records. California employment regulations also address retention of employment records relating to automated systems. Records should be sufficiently descriptive to show what the employer did without exposing unnecessary sensitive candidate information.

Supplier responsibility: Where a third party provides components, map who controls the interface, model settings, operational logs and user communications. A service agreement may allocate tasks but does not in itself remove statutory duties.

Who is responsible when a vendor supplies the tool?

The customer employer still determines the intended decision process and should not assume contractual risk allocation eliminates workplace duties. Review service agreements for access to audit evidence, change notifications, data deletion, candidate complaints and the right to pause the product. Ask who can explain a score and who can correct an erroneous decision. These points belong in a buyer-specific review.

Cross-border distinction: Check whether the same action reaches users in more than one jurisdiction or a regulated sector. Record each legal source separately and avoid copying a jurisdiction-specific conclusion into another country or state.

How is this different from New York City?

New York City Local Law 144 uses a particular definition of automated employment decision tools and an independent bias-audit and notice regime. California’s legal sources have different triggers, protections and retention issues. An organization operating in both jurisdictions should not use one city’s audit as blanket evidence of compliance everywhere. Create a matrix by job location, applicant population and decision process.

Decision record: End with a clearly owned action, the evidence required to close it, a named reviewer role and a truthful next review trigger. If a core fact is unknown, record the gap instead of concluding that the activity is automatically lawful.

Decision matrix: which facts change the answer?

The scenarios above illustrate why automated employment decisions, applicant rights and regulated data must be evaluated from actual facts. They are not universal exemptions or approvals. A change to who operates the AI system, who receives an output or how a decision is made can change the relevant law or professional obligation.

Evidence checklist for a scoped review

• Map hiring stages affected by automated scores
• Review disparate-impact and accommodation evidence
• Determine CCPA ADMT applicability separately
• Document vendor access to audit and change logs

For each checklist item, note the source, business owner, current evidence, unresolved question, action required and review trigger. This creates an auditable working list without claiming that a standard list replaces legal analysis or technical testing. Review the evidence again after a product release, change of vendor, expansion into a new market or relevant official update.

Limitations and alternatives to a standalone review

Some problems can be answered by the official source and a simple internal inventory. Others require qualified local legal counsel, specialist technical testing, independent auditing or consultation with a regulator. A documentary readiness review can identify gaps and prepare questions but should not be described as a certification, official approval or representation in a proceeding unless the actual engagement and qualifications support that description.

Start with the narrow decision in this guide, then follow its related links for adjacent questions. Recheck the current version of each source before taking action. Laws and professional obligations can change after this page is updated, and a service may have multiple functions with materially different regulatory treatment.

Related guides for the next decision

• Ai Law
• Ai Employment Discrimination Compliance
• Ai Governance Consulting
• Ai Credit Decision Compliance