Risk · R-158 · Human Factors & Workforce

Automation bias and over-reliance

People accept AI outputs without the scrutiny they would give another source, and the system's errors pass into decisions unchallenged.

Severity
High
Audience
Heads-of · Practitioner
Frameworks
Article 14 · Human-AI Configuration · Articles 22A to 22D
Reviewed
2026-11-11

What it is

People tend to defer to automated systems. A recommendation on a screen is taken as a starting point and seldom moved far from. The tendency grows when the system is usually right, when the person is busy, when disagreeing takes effort or needs justification, and when the output is fluent and confident. Generative models strengthen it, because their answers read like the work of a competent colleague. This is a property of people and has to be designed around. Training reduces it and does not remove it. It is the mechanism behind ineffective human review, and it affects every user, not only formal reviewers.

How it happens

  • The system's answer is shown before the person has formed a view.
  • Agreeing takes one click and disagreeing requires a written reason.
  • Performance targets reward speed.
  • The system has been right so often that checking feels wasteful.
  • Confidence is displayed in a way that implies more certainty than exists.

Why it matters

Controls that rely on a person to catch the system's errors stop working, with no visible sign. The organisation believes it has human judgement in the process and in practice has the model's output with a signature. The EU AI Act names awareness of automation bias as something human oversight of high-risk systems must provide for.

Warning signs

  • Reviewers agree with the system in nearly every case.
  • Time spent per review has fallen steadily.
  • Errors later found were approved by a person.
  • Staff say they would not know how to do the task without the tool.

Who owns it

The business owner of the process is accountable for the quality of human judgement in it. Designers shape the interface and workflow. Managers set the targets that help or hinder scrutiny.

In practice

Radiographers are given a tool that flags scans as normal or abnormal. Over a year their rate of disagreement with it falls close to zero, and scans flagged as normal are closed in seconds. A class of abnormality the tool misses goes unreported. The same pattern generalises to any process in which a person is placed after a system that is usually right.

Mitigating controls

Primary controls

Reviewer effectiveness testing Detective
Measures whether people actually catch system errors. Override rates, review times and seeded test cases are used to confirm that human reviewers actually detect and correct the system's errors.
Role-based AI training Directive
Teaches reviewers when and how to challenge outputs. Reviewers, developers, risk and assurance staff, approvers and front-line teams receive training specific to their AI responsibilities, with competence assessed and completion tracked.

Supporting controls

Human-in-the-loop review Preventive
Review design can require an independent judgement before the output is shown. Consequential AI outputs and decisions are reviewed by a competent person, with the time, information and authority to change them, before they take effect.
Information for deployers and users Directive
States the system's limits to those relying on it. Those who operate and use an AI system receive current, usable instructions covering its purpose, performance, limitations, the meaning of its outputs and the oversight it needs.

Framework and clause references

FrameworkClauseTitle
EU AI ActArticle 14Human oversight Names automation bias.
NIST Generative AI Profile (NIST AI 600-1)Human-AI ConfigurationHuman-AI Configuration Human-AI configuration.
UK General Data Protection RegulationArticles 22A to 22DAutomated processing and significant decisions Involvement must be meaningful.

Sources

EU AI Act: Regulation (EU) 2024/1689 European Union (EUR-Lex) · official text
NIST Generative AI Profile NIST · framework

Related terms

How to cite

Axiom Verity (2026). Automation bias and over-reliance. Reference Library, R-158. https://axiom-verity.com/risks/automation-bias-and-over-reliance. Reviewed 2026-11-11.