Automated Hiring Just Lost Its Legal Cover
For seven years, companies ran candidates through automated screening tools and treated the output as a neutral verdict. Regulators have now confirmed that this practice has been unlawful under GDPR Article 22 since 2018, the year the regulation took effect. Automated decisions about a person's employment, without meaningful human review, were never permitted. Companies built entire pipelines on the assumption that they were.
Most coverage will treat this as a compliance story, a checkbox that legal teams missed. The deeper read is that it was never a paperwork gap. It was a staffing gap. Article 22 does not ban automated screening, it bans automated screening without a human who can actually intervene, understand the model, and override it with judgment. Most companies never hired that human. They hired the tool and assumed the tool was the judgment.
The algorithm did not remove human judgment from hiring. It just hid where the judgment went.
What this repricing does is put a premium back on the people who can sit between an algorithm and a legal decision and explain, credibly, what the system did and why. That is not a generalist compliance hire. It is someone who understands the model's mechanics well enough to be the human in the loop the law actually requires, and can document that intervention in a way that survives an audit. Those people are rare, and until now nobody was budgeting for them because nobody thought they were mandatory. They are.
For hiring leaders, the practical read is simple. If automated screening sits anywhere in your hiring or people-decision stack, find out now who your qualified human reviewer is, because the market for that role is about to get expensive and the regulators are no longer asking nicely.
Planning a senior AI or data hire and want the market view first? We share it either way.
Send us the brief →