Question 1

What records must employers maintain under DOJ AI hiring consent decrees?

Accepted Answer

DOJ consent decrees for AI hiring violations typically require employers to maintain for 3 years: complete records of all AI hiring decisions (identifying the AI system used), results of all bias audits conducted, records of candidate notices sent, records of accommodation requests received and actions taken, adverse action notices sent, training completion records for all hiring staff, policy change documentation with version history, and vendor contracts for all AI hiring tools. All records must be produced upon the DOJ monitor's request.

Question 2

How long must EEOC recordkeeping obligations require AI hiring records to be kept?

Accepted Answer

Under 42 U.S.C. § 2000e-8 and 29 C.F.R. § 1602.14, employers must preserve personnel and employment records for a minimum of 1 year. If a charge of discrimination or civil action is filed, all records relevant to the charge must be preserved until final disposition. Because AI hiring tools are increasingly the subject of class actions and pattern-or-practice investigations, records should be retained for 3+ years as a practical matter, and standard litigation hold procedures should be triggered as soon as any charge or complaint is filed.

Question 3

What is an immutable audit log in the compliance context?

Accepted Answer

An immutable audit log is a record-keeping system that prevents modification, deletion, or backdating of entries after they are created. Compliance immutability is critical because DOJ investigators and EEOC staff look for record tampering as evidence of guilt. EmployArmor uses cryptographic timestamps and write-once storage to create audit logs that cannot be altered — providing employers with proof of when records were created and that they haven't been modified since.

Question 4

What happens during a DOJ consent decree monitoring review?

Accepted Answer

Under a DOJ consent decree, an independent monitor has the right to request compliance records at any time during the monitoring period (typically 3 years). The monitor typically sends document requests with 15-30 day response windows. Employers must produce: all records specified in the consent decree for the period covered, documentation of each compliance program element (training, notices, bias audits), and any exception or deviation reports. Employers who cannot produce records face compliance failures — which can result in contempt proceedings or extension of the monitoring period.

Question 5

What EEO-1 records must be maintained for AI hiring compliance?

Accepted Answer

Under 29 C.F.R. § 1602, employers with 100+ employees must retain EEO-1 records for at least 1 year. In the AI hiring context, EEO-1-adjacent records include: applicant flow logs showing candidates who applied and were screened in or out by the AI system, selection decisions by protected class for each stage of the AI-assisted hiring process, and documentation identifying which AI tools were used in each stage. These records must be available for EEOC subpoena in discrimination investigations.

Question 6

How do stacked retention obligations work across AI hiring laws?

Accepted Answer

Multiple laws create retention obligations that stack on top of each other for the same records. For example: EEOC requires 1 year minimum for applicant records; FCRA requires 2 years for adverse action records; BIPA requires up to 3 years max for biometric data; DOJ consent decrees require 3 years for all compliance records. The practical standard for AI hiring records that could be covered by multiple laws is 3 years, plus litigation hold preservation for any records related to pending or threatened legal action.

Question 7

What does a DOJ-ready compliance export need to include?

Accepted Answer

A DOJ-ready compliance export for AI hiring should include: a summary of all AI tools used in hiring during the period, complete bias audit results with methodology, candidate notice delivery logs with per-candidate timestamps, accommodation request and resolution records, adverse action notice delivery records, training completion records with individual completion dates and test scores, policy version history with effective dates, and vendor contracts with compliance provisions. EmployArmor's audit history exports all of these in a structured, investigator-ready format.

Question 8

Can missing compliance records result in contempt during DOJ monitoring?

Accepted Answer

Yes. Employers under DOJ consent decrees who fail to produce required records — either because records were never created, were deleted prematurely, or were destroyed in anticipation of a monitor request — can face contempt proceedings in federal court. Courts have held that spoliation of evidence (destruction of records that should have been preserved) creates an adverse inference that the destroyed records would have been unfavorable to the employer. Systematic record gaps are treated as compliance failures rather than administrative oversights.

AI Hiring Audit History FAQ: DOJ Consent Decree Recordkeeping

Frequently Asked Questions

Related Resources

Build Your Audit Trail Now