Insights
The latest developments in AI compliance, UK data law and responsible hiring — curated for recruitment professionals.
The ICO engaged with employers on their use of automated decision-making in recruitment and wrote to 16 of them with specific compliance recommendations. Oleeo's breakdown of the most common failures is a direct checklist of what the regulator is looking for — and what most agencies are currently missing. Source: Oleeo / ICO.
Technology's Legal Edge analyses the ICO's escalating scrutiny of AI hiring tools — from CV screening to video interview analysis. The piece is clear: the regulator is no longer just publishing guidance. It is writing to employers and vendors directly. Source: Technology's Legal Edge.
The Data (Use and Access) Act 2025 formal complaints process came into force on 19 June 2026. Brodies LLP confirms the ICO has published new guidance alongside the new rules. Every organisation that processes personal data — including recruitment agencies using AI screening tools — must now have a compliant complaints procedure in place. Source: Brodies LLP.
Bratby Law's practical guide to how the Data (Use and Access) Act 2025 changes the automated decision-making framework. The DUAA gives the Secretary of State power to require the ICO to produce a statutory code of practice on AI and ADM — which, once published, will be binding in enforcement proceedings. Source: Bratby Law.
Freeths analysis of the ICO's updated ADM guidance published for consultation on 31 March 2026 — covering when automated decision-making is permitted, the restrictions that apply, and the safeguards required. The consultation closed 29 May 2026; final guidance is expected later in 2026 and will carry significant weight in enforcement. Source: Freeths.
The ICO confirmed on 29 May 2026 that its next AI workstream will include a statutory code of practice on automated decision-making and agentic AI guidance. Measured Collective sets out what organisations should be reviewing and documenting now — before the code lands and compliance becomes a baseline expectation. Source: Measured Collective.
The ICO warns UK employers that AI tools used to screen CVs, rank candidates and analyse video interviews may already be breaking data protection law if a human is not meaningfully involved in every consequential decision. The regulator has written directly to 16 named organisations. Source: TechTimes.
Personnel Today covers the ICO's formal call for organisations to audit their AI recruitment processes. A practical summary of what the regulator expects and what HR and recruitment teams need to do now. Source: Personnel Today.
Legal analysis of the ICO's updated ADM guidance following changes introduced by the Data (Use and Access) Act 2025 — covering what has changed, what the new framework requires, and why it matters for every organisation using AI in hiring. Source: Burges Salmon.
A new statutory instrument formally commissions the ICO to prepare a code of practice on AI and automated decision-making. Once finalised, courts and the regulator must take it into account in any enforcement or legal proceeding. Source: The Modern Regulator.
A PwC study finds UK businesses invest just 2% of revenue in AI versus 5% globally — and only 27% have redesigned their workflows to integrate it properly. In recruitment, that gap creates legal risk as well as commercial cost. Source: Business Matters / PwC.
The House of Commons Business and Trade Committee launched a formal inquiry into AI and the future of the UK workforce — examining bias, transparency, accountability and whether current protections are sufficient. Parliamentary scrutiny of AI in hiring is intensifying. Source: Farrer & Co.
A detailed legal analysis of where the line falls between AI as decision support and AI as the decision-maker — and why getting it wrong exposes organisations to enforcement under both UK GDPR and the EU AI Act's high-risk classification for recruitment tools. Source: Ropes & Gray.
The ICO's own statement on AI in recruitment. Acknowledges efficiency benefits but is clear that transparency, meaningful human oversight, bias monitoring and data subject rights are non-negotiable. The starting point for any compliance review. Source: ICO.
A practical guide to the legal exposure UK employers face when using AI in recruitment — covering UK GDPR automated decision-making rules, Equality Act 2010 indirect discrimination risk, DPIA requirements, and what meaningful human oversight looks like in practice. Source: Fisher Phillips.
Video interview tools may misinterpret accents or facial expressions, disadvantaging candidates from certain backgrounds. AI systems trained on historically biased data reproduce those patterns at scale — and under the Equality Act 2010, employers remain liable even when the decision was made by software. Source: Reworked.
A clear, practical guide to the legal exposure UK employers face when using AI in recruitment — covering UK GDPR automated decision-making rules, Equality Act 2010 indirect discrimination risk, DPIA requirements, and what meaningful human oversight looks like in practice. Source: Davidson Morris.
Not sure what this means for you?
Leave your email and you'll be among the first to hear about it.