Don't Ask a Candidate to Open Their Own AI History

What arrives with the account besides the work

Three things nobody asked for. A candidate's own AI account can hold their last employer's material, other people's data inside that material, and the candidate's own questions about health, money and family. None of those separate cleanly at the moment of scrolling.

The session you wanted sits in the same list as everything else, and the list is what opens.

Start with the material that is not theirs to show. Much real AI work at a job runs on internal documents: a pricing sheet, a client roster, an unreleased roadmap, a draft that names people by name.

A candidate who opens that session to make a point is handing over a former employer's property, and the handing is the part that reaches you.

Federal trade-secret law has words for that moment. The Defend Trade Secrets Act, which added the definition in 2016, says misappropriation includes acquiring a trade secret when the person knows or has reason to know it was acquired by improper means ⁴. Improper means, defined in the same section, reaches breach or inducement of a breach of a duty to maintain secrecy.

Acquisition is the verb there. Use is a separate branch.

An interviewer who asks is arguably no longer a bystander.

Third parties ride along too. The same scroll holds the colleague whose performance problem got workshopped with a model, the customer whose complaint was pasted in for a draft reply, and the record that should never have been pasted anywhere. Each is attached to a person who never applied to your company.

The last of those has its own answer, in a candidate says they pasted regulated data into a chatbot.

What counts as an inquiry when nobody asked a question

More than the sentence spoken out loud. The Americans with Disabilities Act, enacted in July 1990, bars an employer from asking a job applicant whether they have a disability, or about its nature or severity, before a conditional offer ¹. Nothing cited here settles whether inviting a candidate to scroll their own chat history counts as asking.

What the scroll produces is not in doubt.

People ask models what they will not ask a person. A symptom at midnight, a medication interaction, a benefits appeal, an immigration form, a debt letter, a custody question.

The history of a personal account can be a health and money record with some work in it.

Genetic information carries a stricter rule than instinct suggests. Under the federal GINA regulation issued in November 2010, family medical history is genetic information: the manifestation of a disease or disorder in an individual's family members ². A candidate who once asked a model what a parent's diagnosis meant is carrying family medical history in the list.

The same rules define asking broadly. A request for genetic information includes conducting an internet search on someone in a way that is likely to result in obtaining it, and searching a person's personal effects for that purpose ³. The exception for inadvertent acquisition does not reach probing follow-up questions an employer should know are likely to produce the information.

An open chat window is not an internet search, and nothing cited here calls it one. The direction of the rule is clear anyway.

What an interviewer sees also enters the process, and processes keep things. How long any of it may be held, and in what form, is taken up in what you may collect and keep from a candidate's AI session.

For anyone hiring into the EU the principles were adopted in 2016, and they cut against a wide read. Article 5 of the General Data Protection Regulation requires personal data to be adequate, relevant and limited to what is necessary for the purpose, collected for specified purposes, and kept no longer than those purposes need ⁵.

A scroll through a personal account is the opposite shape: everything, then a search for the relevant part.

Confirm any of this with employment counsel before it becomes process.

Who can say yes to the ask without paying for it?

Candidates whose employer bought them an account. A work seat holds work sessions, which can be shown without exposing a private life, and those sessions already sit under somebody's written policy. A candidate who does all their AI work in one personal account has no clean half to open. The ask sorts people by who was issued a login.

That sorting probably tracks employer size, because AI use itself does. The Census Bureau's Business Trends and Outlook Survey put AI use at 19.8% of US businesses as of 3 May 2026, against 37% among firms with at least 250 employees ⁶.

The unit counted there is the firm rather than the worker, and most firms are small, so the figure is a rate across companies and not a headcount of people.

Asking for a work session can edge toward asking who worked somewhere big.

The candidate who has nothing safe to open has to decline, live, to the person holding the decision. A decline reads as evasion whatever produced it, and what produces it is often a confidentiality agreement, an employer policy with teeth, or a private life somebody is entitled to keep.

An agreement that blocks the best example is common enough to have its own answer. What to ask when an NDA blocks the candidate's best example is the version of this conversation that needs nobody's screen.

A decline can also disclose. A candidate who says the history is too personal to open has told you something about the history, which sits close to the outcome the pre-offer rule exists to prevent.

Run the walkthrough on a session you built

Hand over the task and watch the session it produces. The unrehearsed quality you were after comes from the problem being new, not from the account being theirs. A case they have not seen, an assistant that will do the whole thing if nobody stops it, and forty minutes of work produce a live record you created, holding nothing that belongs to anyone else.

Four choices make that version defensible rather than merely different:

• Say what is captured before the round starts, name the window it covers, and state how long it is kept.
• Keep capture to the workspace you supplied. Nothing else on the machine is yours.
• Offer the identical route to every candidate at that stage, including the ones who volunteered something better.
• Write down what the round is watching for before the first session runs, so two readers can compare.

The notice half already has an answer in what you have to tell a candidate before recording their screen, and how long you can keep it.

What is worth watching is narrow. Where the candidate stops and reframes the problem instead of taking the model's framing. Which claim they go outside the conversation to check, and against what. What they refuse to delegate at all.

A case with one thing wrong in it is what makes the checking visible, which is the whole design question in seeding a repo so the exercise tests checking, not typing.

Your case is one afternoon of your own imagination, and a task you wrote is a task somebody can prepare for. A candidate's own history is the only place a year of unstaged decisions is already recorded, and nothing here recovers that.

What to do when a candidate opens one anyway

Read only what you asked about, and say so out loud while it is happening. Candidates sometimes volunteer sessions to be helpful, and the offer does not move the problem onto them. The material on the screen still belongs to a former employer, still carries a private life, and the person looking at it is still you.

Say three things in the room, in that order. Name the one thing worth seeing. Ask for that alone. Say that anything else on the screen stays out of the notes.

Then keep the last promise where it counts, which is the written record.

A screen note quoting a candidate's private material puts that material in a file the process keeps, and the file outlives the round by years.

A log a candidate hands over deliberately is a different object. What to look for in a candidate's AI chat log applies whether it came with a take-home or arrived unasked in a live round.

The account stays shut.

A candidate's own history is still the best record of how that person works, and still the one record an employer should not hold. What opens instead is the session you supplied: dated, bounded, and identical for everyone who got that far. Ask for that one.

Read the evidence >