June 2026
What the ICO's ADM recruitment report means for agencies — and what you need to do now
Following its review of over 30 employers, the ICO's central finding is stark: most agencies using AI tools don't realise they're making automated decisions — and are therefore missing the safeguards required by law. Transparency, human oversight, bias monitoring, and candidate rights aren't optional. They're the baseline.
The DUAA complaints obligation is now in force — here's what recruitment agencies must have in place
From 19 June 2026, every data controller must operate a formal data protection complaints procedure — no exemptions, no grace period. For agencies handling candidate data daily, this means a documented process, 30-day acknowledgement obligation, and a clear route for candidates to escalate to the ICO. Not having one is immediate non-compliance.
ICO warns agencies: not knowing you're using automated decision-making is not a defence
The ICO's key finding from its recruitment investigation is that many agencies don't realise their ATS or CV screening tools are making automated decisions on their behalf. Under Articles 22A–22D of the UK GDPR (as updated by the DUAA), that unawareness creates direct legal exposure — including the obligation to complete a DPIA and enable candidates to request human review.
May 2026
ICO tells UK employers: AI hiring tools without genuine human review may violate data law
The ICO is warning UK employers that AI tools used to screen CVs, rank candidates and analyse video interviews may already be breaking data protection law if a human is not meaningfully involved in every consequential decision. The regulator has written directly to 16 named organisations — enforcement follows next.
ICO calls on recruiters to review use of automated decisions
Personnel Today covers the ICO's formal call for organisations to audit their AI recruitment processes ahead of the May 29 consultation deadline. A practical summary of what the regulator expects and what HR teams need to do now.
ICO consults on new automated decision-making guidance following DUAA reforms
Legal analysis of the ICO's updated ADM guidance following changes introduced by the Data (Use and Access) Act 2025. Covers what has changed, what the new framework requires, and why the consultation closing 29 May matters for every organisation using AI in hiring.
The ICO will write the UK's rulebook on AI decisions — and its reach will extend far beyond the UK
A new statutory instrument formally commissions the ICO to prepare a code of practice on AI and automated decision-making. Once finalised, courts and the regulator must take it into account in any enforcement or legal proceeding — making this one of the most consequential AI governance documents the UK has produced.
April 2026
UK firms risk being left behind as AI adoption gap widens, warns PwC
A PwC study finds UK businesses invest just 2% of revenue in AI versus 5% globally — and only 27% have actually redesigned their workflows to integrate it properly. The rest switched the tools on and carried on as before. In recruitment, that gap isn't just costing money. It's creating legal risk.
AI in the workplace 2026: what employers need to know about the Business and Trade Committee inquiry
The House of Commons Business and Trade Committee has launched a formal inquiry into AI and the future of the UK workforce — examining bias, transparency, accountability and whether current workplace protections are sufficient. A clear signal that parliamentary scrutiny of AI in hiring is intensifying.
March 2026
Automated decisions can streamline the hiring process — with the right safeguards in place
The ICO's own statement setting out its position on AI in recruitment. Acknowledges the efficiency benefits of automation but is clear that safeguards — transparency, meaningful human oversight, bias monitoring, and data subject rights — are non-negotiable. The starting point for any compliance review.
February 2026
Is AI baking in discrimination in recruitment?
Video interview tools may misinterpret accents or facial expressions, disadvantaging candidates from certain backgrounds. AI systems trained on historically biased hiring data can reproduce those patterns at scale — and under the Equality Act 2010, employers remain liable for discriminatory outcomes even when the decision was made by software.
AI recruitment in 2026: GDPR and discrimination risks
A clear, practical guide to the legal exposure UK employers face when using AI in recruitment — covering UK GDPR automated decision-making rules, Equality Act 2010 indirect discrimination risk, DPIA requirements, and what meaningful human oversight actually looks like in practice.
We help recruitment businesses understand their AI compliance obligations and take practical steps to manage risk — without the jargon.