Ayesha Fatima is a People Operations leader with experience managing HR across APAC for a global B Corp-certified digital agency operating in over 40 countries. She holds CHRP and SHRM-CP certifications and is currently studying AI governance. Her work spans HRIS administration, employee lifecycle management, performance operations, and multi-country HR compliance.
Executive Summary
The global regulatory landscape for AI in employment is fragmenting rapidly. The EU AI Act, US federal and state regulations, and emerging APAC frameworks each impose different obligations on organisations deploying AI in HR. This article maps the current regulatory landscape, identifies the compliance challenges specific to multi-country HR operations, and proposes a practical architecture for managing AI compliance across jurisdictions.
The Fragmented Landscape
Gartner research found that only 37 percent of leaders have confidence in their ability to assess compliance effectiveness. For HR teams managing AI deployment across multiple countries, this confidence gap is not abstract; it is operational risk.
The EU AI Act provides the most comprehensive framework but is not the only one. The US approach combines federal guidance (EEOC on AI hiring, NIST framework) with state-level regulation (NYC Local Law 144, Illinois AI Video Interview Act, Colorado’s AI discrimination provisions). In APAC, Singapore’s Model AI Governance Framework takes a voluntary, principle-based approach. Australia’s AI Ethics Framework provides guidance without binding regulation. Japan’s Social Principles of Human-Centric AI emphasises human oversight. China’s regulatory approach focuses on algorithmic recommendation systems and deepfakes with employment-specific provisions still emerging.
For global HR teams, this fragmentation means that a single AI recruitment tool may be subject to different regulatory requirements in every market where it is deployed. Compliance cannot be achieved through a single global policy; it requires a compliance architecture that accounts for jurisdictional variation.
The Compliance Architecture
Layer 1 — Global Baseline: Establish a minimum governance standard that applies to all AI deployments in HR globally. This baseline should be anchored to the most stringent applicable regulation (currently the EU AI Act) on the principle that meeting the highest standard ensures compliance with lower standards. The baseline should cover transparency requirements, human oversight design, bias auditing frequency, and data privacy protections.
Layer 2 — Regional Adaptation: For each region where the organisation operates, map the specific regulatory requirements that exceed the global baseline. In the EU, this includes conformity assessments and fundamental rights impact assessments. In the US, it includes state-specific audit and disclosure requirements. In APAC, it includes jurisdiction-specific data localisation and consent requirements.
Layer 3 — Market-Specific Compliance Checklists: For each market, maintain a checklist of AI-related employment law requirements, reviewed at minimum semi-annually. These checklists should be practical operational documents, not legal reference materials; they should tell the HR team what to do before deploying or modifying an AI system in that market.
Layer 4 — Vendor Governance: Apply consistent vendor assessment standards globally. Every AI vendor used in HR should be evaluated against the organisation’s global baseline regardless of the jurisdiction where the tool is deployed. Contractual provisions should require vendor cooperation with bias audits, transparency about model functioning, and notification of material changes to AI capabilities.
In my experience managing people operations across APAC for a global organisation, the most effective compliance approach is to build governance that exceeds the minimum in every market rather than tailoring to each market’s minimum. This is operationally simpler, reduces the risk of inadvertent non-compliance when employees move between jurisdictions, and positions the organisation to absorb new regulatory requirements with minimal disruption.
Conclusion
AI compliance in global HR is not one problem. It is every problem, in every market, simultaneously. The organisations that build compliance architecture rather than compliance checklists will navigate this complexity more effectively, more consistently, and with less exposure to the regulatory penalties that are becoming increasingly severe worldwide.
About the Author
Ayesha Fatima is a People Operations leader with experience managing HR across APAC for a global B Corp-certified digital agency operating in over 40 countries. She holds CHRP and SHRM-CP certifications and is currently studying AI governance. Her work spans HRIS administration, employee lifecycle management, performance operations, and multi-country HR compliance.
The views expressed are my own and do not necessarily reflect the views of my employer.
Assisted by AI, reviewed and approved by me.
References
EU AI Act. (2024). Regulation 2024/1689.
EEOC. (2023). AI Employment Guidance.
NYC Local Law 144. (2023).
Singapore IMDA. (2020). Model AI Governance Framework.
NIST. (2023). AI RMF 1.0.
Gartner. (2026). Compliance Confidence Survey.
Illinois AI Video Interview Act. (2020).
Colorado AI Discrimination Provisions. (2024).
Global People Operations Leader with 10+ years of experience across APAC and remote-first organizations. Specializing in Workday, employee lifecycle management, and people-first HR operations. Connect on LinkedIn