Risk · R-158 · Human Factors & Workforce
Automation bias and over-reliance
People accept AI outputs without the scrutiny they would give another source, and the system's errors pass into decisions unchallenged.
- Severity
- High
- Audience
- Heads-of · Practitioner
- Frameworks
- Article 14 · Human-AI Configuration · Articles 22A to 22D
- Responsible AI domain
- Lifecycle stage
- Reviewed
- 2026-11-11
What it is
People tend to defer to automated systems. A recommendation on a screen is taken as a starting point and seldom moved far from. The tendency grows when the system is usually right, when the person is busy, when disagreeing takes effort or needs justification, and when the output is fluent and confident. Generative models strengthen it, because their answers read like the work of a competent colleague. This is a property of people and has to be designed around. Training reduces it and does not remove it. It is the mechanism behind ineffective human review, and it affects every user, not only formal reviewers.
How it happens
- The system's answer is shown before the person has formed a view.
- Agreeing takes one click and disagreeing requires a written reason.
- Performance targets reward speed.
- The system has been right so often that checking feels wasteful.
- Confidence is displayed in a way that implies more certainty than exists.
Why it matters
Controls that rely on a person to catch the system's errors stop working, with no visible sign. The organisation believes it has human judgement in the process and in practice has the model's output with a signature. The EU AI Act names awareness of automation bias as something human oversight of high-risk systems must provide for.
Warning signs
- Reviewers agree with the system in nearly every case.
- Time spent per review has fallen steadily.
- Errors later found were approved by a person.
- Staff say they would not know how to do the task without the tool.
Who owns it
The business owner of the process is accountable for the quality of human judgement in it. Designers shape the interface and workflow. Managers set the targets that help or hinder scrutiny.
In practice
Radiographers are given a tool that flags scans as normal or abnormal. Over a year their rate of disagreement with it falls close to zero, and scans flagged as normal are closed in seconds. A class of abnormality the tool misses goes unreported. The same pattern generalises to any process in which a person is placed after a system that is usually right.
Mitigating controls
Primary controls
- Reviewer effectiveness testing Detective
- Measures whether people actually catch system errors. Override rates, review times and seeded test cases are used to confirm that human reviewers actually detect and correct the system's errors.
- Role-based AI training Directive
- Teaches reviewers when and how to challenge outputs. Reviewers, developers, risk and assurance staff, approvers and front-line teams receive training specific to their AI responsibilities, with competence assessed and completion tracked.
Supporting controls
- Human-in-the-loop review Preventive
- Review design can require an independent judgement before the output is shown. Consequential AI outputs and decisions are reviewed by a competent person, with the time, information and authority to change them, before they take effect.
- Information for deployers and users Directive
- States the system's limits to those relying on it. Those who operate and use an AI system receive current, usable instructions covering its purpose, performance, limitations, the meaning of its outputs and the oversight it needs.
Framework and clause references
| Framework | Clause | Title |
|---|---|---|
| EU AI Act | Article 14 | Human oversight Names automation bias. |
| NIST Generative AI Profile (NIST AI 600-1) | Human-AI Configuration | Human-AI Configuration Human-AI configuration. |
| UK General Data Protection Regulation | Articles 22A to 22D | Automated processing and significant decisions Involvement must be meaningful. |
Sources
- EU AI Act: Regulation (EU) 2024/1689 European Union (EUR-Lex) · official text
- NIST Generative AI Profile NIST · framework
Related terms
How to cite
Axiom Verity (2026). Automation bias and over-reliance. Reference Library, R-158. https://axiom-verity.com/risks/automation-bias-and-over-reliance. Reviewed 2026-11-11.
Found an error or a better source? Report a correction.