The EU AI Act is the first EU law to categorize AI according to risk class. All tools that prepare hiring or promotion decisions are considered high-risk and must meet strict requirements on transparency, bias control and human oversight from 2025/26.
Contents
Why the EU AI Act is changing recruiting
High fines: Violations can cost up to € 35 million or 7% of global annual turnover* .
Recruiting = high-risk category: life-changing decisions (hiring, rejection, promotion) are particularly regulated*.
Extraterritorial effect: Non-EU companies are also affected if their tools evaluate applicants in the EU.
Schedule & deadlines
Date | Milestone |
---|---|
July 12, 2024 | Publication in the EU Official Journal |
01 Aug 2024 | Formal entry into force |
Aug 2025 | First obligations for basic models (e.g. GPT class) |
Feb 2026 | Mandatoryhigh-risk obligations for recruiting tools |
Aug 2026 | Full application & fine regime |
High-risk classification & prohibited HR use cases
Permitted | High-risk (strictly regulated) | Prohibited |
---|---|---|
Chatbots that only inform | CV matching, ranking, video scoring, AI-based pre-screenings | Emotion recognition for suitability assessment, social scoring |
Note: As soon as a tool automatically decides “suitable/unsuitable”, it falls into the high-risk area. Emotion tracking or social scoring are prohibited as a matter of principle.
Your 7 mandatory building blocks (checklist)
Create AI tool inventory (purpose, data types, provider).
Check risk analysis & CE verification of each tool.
Data governance: Test training data for representativeness & bias.
Transparency: Clearly inform applicants that AI will be used – including fairness justification.
Defining human supervision: Who gets to adjust or stop AI decisions?
Logging & Incident Plan: Store results for at least five years; report serious incidents within 15 days.
Training & annual audit: bias awareness, tool competence, update compliance report.
Free AI Act compliance checklist
PDF (2 pages) – 14 tasks + responsibility matrix.
Download now and simply tick off: EU AI Act checklist free of charge
What the EU AI Act actually means for recruiting software – what does a bias audit involve?
Why recruiting tools are classified as high-risk AI
Annex III of the EU AI Act explicitly classifies AI systems in the areas of“recruitment, promotion or dismissal of persons” and “assessment of candidates” as high risk. This means that ATS matching algorithms, automated CV parsers and video assessments fall under the strictest obligations of the law Artificial Intelligence Act EU.
Binding requirements on risk management, data governance, transparency, technical documentation and human oversight will apply to high-risk systems from entry into force (2 Aug 2026) (Chapter III, Art. 9-15) futurium.ec.europa.eu.
Violations are punishable by fines of up to €35 million or 7% of global turnover Taylor Wessing Reuters.
What exactly does the bias audit according to Art. 10 require?
Article 10 obliges providers and operators to systematically check and document their training, validation and test datasets for bias and discrimination risks Artificial Intelligence Act – EUScienceDirect.
Audit module | Brief description | Typical evidence |
---|---|---|
Data mapping | Disclose origin, representativeness & completeness of all training/evaluation data | Data sheet, schema diagram |
Bias screening | Statistical checks for under/over-representation (e.g. gender, age, ethnicity) | Demographic report, p-value tests |
Mitigation plan | Measures to correct identified biases (re-sampling, re-weighting, fairness constraints) | Versioned Jupyter notebooks / audit log |
Performance & Fairness KPI | Documentation of Accuracy, F1 and Fairness metrics (e.g. Equal Opportunity Diff.) | Benchmark table |
Continuous Monitoring | Post-market plan for drift detection & annual re-audits | Monitoring dashboard, ticket log |
Practical tip: Art. 10(5) even allows the processing of sensitive data (“special categories”) exclusively for bias correction, provided that strict protective measures are in place *Computer Law & Security Review: The International Journal of Technology Law and Practice.
Practical case: how Kooku conducted a pilot audit in only 28 days has carried out
Company: German medium-sized company (logistics, 750 employees)
Initial situation: ATS with automatic ranking & video scoring
Roadmap:
Day 1-5 inventory + bias test
Day 6-10 Obtain CE certificates
Day 11-15 Transparency texts in job advertisements
Day 16-24 Oversight workflow + logging
Day 25-28 Training & final audit
Result: Audit report fulfills AI Act obligations; additional -18% time-to-hire thanks to clear oversight paths.
Next steps with Kooku – your professional recruiting consultant
Needs-Assessment (30 min) – free quick check of your recruiting processes for possible weaknesses.
As required: AI-Act pilot audit – 4-week program incl. bias test & oversight setup.
As required: Data-driven recruiting – KPI dashboard & automation roadmap. Find out more about our consulting services now!
Zum Service: Recruiting Beratung von Kooku
Mit unseren Best Practices können Sie sich und Ihrem Recruiting-Team mittel- und langfristig bis zu 60 % administrativen Aufwand sparen und somit vollen Fokus auf das Wesentliche legen: Die nachhaltige Rekrutierung von Fach- und Führungskräften.
Hier klicken für mehr InfosFAQ on the EU AI Act in recruiting
Which HR tools are considered high-risk?
All systems that make recommendations or decisions about hiring, promotion or termination - e.g. resume parsers, matching algorithms, video scoring.
As an employer, do I need a CE marking?
No, but you must prove that your tool provider has achieved CE conformity and continues to do so.
What are the penalties for violations?
Fines of up to €35 million or 7% of global annual turnover and possible claims for damages by applicants.
Does the AI Act also apply to non-EU companies?
Yes, as soon as AI-supported recruiting processes Europe-related data or evaluates EU applicants.
What documentation obligations under the EU AI Act specifically apply to HR departments?
HR teams must maintain a continuous risk management process in accordance with Art. 9, keep bias analyses and logs for at least five years and be able to present a declaration of conformity from the AI provider at any time.
When does the EU AI Act apply to applicant tracking systems (ATS)?
For high-risk tools such as ATS with automatic ranking, the obligations will apply from February 2026 at the latest. However, companies should start auditing and supplier due diligence in 2025 in order to meet all deadlines.
Do recruiters need to be trained when AI is used?
Yes. Art. 14 obliges companies to train employees in bias detection, oversight and transparency - ideally annually and documented in the compliance report.
How does the AI Act affect time-to-hire?
If implemented correctly, the time-to-hire is often reduced because clear oversight processes make decisions faster. Our pilot projects show an average time-to-hire of -18% after audit and data preparation.
Does the law also apply to external headhunters and RPO service providers?
Yes. The AI Act distinguishes between “providers” (tool providers) and “deployers” (users). If headhunters use AI systems, both the agency and the client are responsible for compliance.
What fines can be imposed for violations, especially in the recruiting context?
Misuse or non-compliant use of high-risk AI can result in penalties of up to €35 million or 7% of annual global turnover - plus claims for damages by candidates.
Is there a free EU AI Act checklist for HR?
Yes. You can download our 14-point checklist with RACI matrix free of charge and immediately check whether your recruiting tools are AI-Act-ready. (→ Download the EU AI Act checklist free of charge)