UK GDPR Articles 22A–22D came into force on 5 February 2026. In March, the ICO reported that employers who believed they were using AI as decision support were, in practice, often making solely automated decisions — and wrote to 16 of them.
Six questions about how you hire and what you use. They tell us whether these obligations reach you, and what putting it right would involve.
Express your interest →No card details. No obligation. Stephanie reads every one herself — and will say so if we are not the right fit. See our Privacy Notice.
The ICO engaged with employers on automated decision-making in recruitment and issued specific compliance recommendations.
Read article → June 2026Escalating regulatory scrutiny of AI hiring tools — from CV screening to video interview analysis.
Read article → June 2026The DUAA 2025 formal complaints process came into force on 19 June 2026. Here's what it requires.
Read article → June 2026How the Data (Use and Access) Act 2025 reshapes the automated decision-making framework for hiring.
Read article → May 2026The ICO warns employers that CV-screening and candidate-ranking tools may already breach data protection law.
Read article → April 2026Where the line falls between AI as decision support and AI as the decision-maker — and why getting it wrong is costly.
Read article →Scroll for more →