AI governance should be 'evolving process, not a one-time policy document,' says expert
HR professionals risk eroding employee trust, accelerating attrition, and exposing their organizations to legal and reputational damage as workplace AI adoption outpaces ethics and compliance policies, according to one expert.
Ethics and compliance programs have shifted from back-office legal functions to a core part of HR strategy, Jan Sláma, co-founder and CEO of FaceUp, a whistleblowing and compliance platform, tells Canadian HR Reporter.
"Ethics and compliance are ultimately about protecting a company's reputation, people, resources, and culture," he says. "They help organizations prevent problems before they escalate, or at least identify them early enough to address them effectively."
He links the issue directly to retention. "Most employees don't leave companies 'for no reason,'" Sláma says. "Usually, something has been bothering them for a long time, whether that's toxic behaviour, poor management, discrimination, burnout, or a lack of trust."
The challenge, he adds, is that "HR teams often only learn about these issues during exit interviews, if at all."
Organizational reputation is an underappreciated indicator of toxicity – and one closely tied to the erosion of trust in HR itself, according to one expert.
How can HR encourage workers to speak up?
Confidential reporting channels can close that gap, he says, allowing employees "to speak up before frustration turns into disengagement, attrition, reputational damage, or legal risk."
Sláma says the urgency has intensified roughly three years after ChatGPT reached 100 million users, as AI tools spread through workplaces without formal guidance.
"Many employees are already using AI tools at work, often without clear guidance from their employers," he says. "In many companies, AI adoption is happening faster than governance."
Without clear policies, he says, employees "may not know what tools are approved, what data can or cannot be shared with AI systems, where human review is required, or what ethical boundaries should exist around AI-generated work." The risks become "especially sensitive" when AI is used in hiring, performance evaluations, internal communication, or workforce monitoring.
Sláma recommends that employers build practical, transparent AI policies covering approved tools, data-sharing limits, mandatory human oversight, and guiding ethical principles. He urges companies to invest in employee education on "confidentiality, hallucinations, copyright, or bias," and to treat AI governance "as an evolving process, not a one-time policy document."
Transparency, he added, is central to HR's credibility. "Employees should understand when AI is being used internally, especially in areas that may affect them directly, such as HR processes or workplace monitoring."
Speaking with an AI system
FaceUp recently introduced an AI-powered hotline that allows employees to describe workplace concerns through natural voice conversations with an AI agent rather than traditional phone menus.
"The AI guides the conversation, asks relevant follow-up questions, automatically creates transcripts and structured reports, and securely routes cases to authorized investigators inside the organization," Sláma says. He says the tool captures key details "during the first interaction" and operates "24/7, multilingual, scalable, and much easier to access globally than traditional hotline infrastructure."
Sláma says employees often find AI hotlines less intimidating than human operators. "Employees often feel more comfortable speaking with an AI system about sensitive issues than with a human operator. That can significantly reduce the psychological barrier to reporting."
He cautions, however, that AI should not replace human judgement in compliance work. "AI can help structure information and surface risks, but investigations, judgments, and accountability should remain with trained people."
Looking ahead, Sláma says employee trust will determine which companies benefit from AI adoption. "The organizations that succeed with AI long term will be the ones that maintain employee trust while adopting innovation."
Workforce trust – not access to AI tools – will determine whether AI delivers the productivity and retention outcomes they need, based on the findings of a recent study from The Adecco Group.
But employees are doing most of their work-related AI tasks through personal accounts that employers cannot easily monitor, creating fresh governance, privacy and offboarding risks for HR professionals, according to a research.