ICO issues guidance for employers using AI in recruitment

ICO urges AI compliance in recruitment processes

Employers using artificial intelligence (AI) tools for recruitment must ensure they comply with data protection laws, according to a new report from the Information Commissioner's Office (ICO).

The report outlines key findings and recommendations following audits of AI providers in the recruitment sector, highlighting the data protection risks posed by AI and the importance of oversight.

In the report, employers are advised to:

• monitor AI provider compliance - ensure that AI providers follow data protection rules and implement their own processes
• minimise data use - only collect and retain necessary personal information
• address bias - ensure AI systems reduce bias and avoid using personal data for unintended purposes
• provide transparency - improve privacy notices and clarify who is responsible for informing candidates about how their data is used
• ensure human oversight - do not rely solely on AI for decision-making; allow candidates to challenge automated decisions

The ICO also emphasised the importance of conducting internal audits to assess compliance.

Read the full report on AI tools in recruitment.

Further guidance is expected from the ICO on AI and biometric data, as well as generative AI tools.

First published 21 November 2024