--- title: "EU AI Act and Recruitment AI in Germany: Compliance Guide (2026)" description: "AI recruitment tools in Germany are high-risk under EU AI Act Annex III. What employers need to comply before the August 2026 deadline." image: "https://compound.law/assets/images/og-image-en.webp" source: "https://compound.law/en-DE/ai-act/recruitment/" language: "en" --- ![EU AI Act recruitment AI compliance Germany — high-risk Annex III](https://compound.law/assets/images/ai-act/ai_act_2.webp) ai-act # EU AI Act and Recruitment AI in Germany: Compliance Guide (2026) 16 April 2026 Short answer AI recruitment tools in Germany — CV screening, candidate ranking, automated interview analysis — are high-risk AI systems under EU AI Act Annex III. Employers deploying such systems must implement human oversight, technical documentation, and transparency measures by August 2, 2026. - EU AI Act Annex III classifies AI used in hiring, candidate screening, and employment decisions as high-risk. - Both AI providers and deploying employers face binding obligations from August 2, 2026. - Human oversight of AI-assisted hiring decisions is mandatory — pure automation violates both the AI Act and GDPR Article 22. - Works councils (Betriebsrat) have mandatory co-determination rights under BetrVG Section 87 when AI hiring tools are introduced. AI recruitment tools in Germany — from CV screening algorithms to automated interview analysis platforms — are **high-risk AI systems under EU AI Act Annex III**. Employers deploying these tools face binding compliance obligations from August 2, 2026. This guide explains what the AI Act requires, how it interacts with GDPR and German works council law, and what HR teams should do now. ## What the EU AI Act Classifies as Recruitment AI **EU AI Act Annex III, Section 4** lists the following as high-risk AI systems in the employment domain: - AI used to screen or filter job applications and CVs - AI used to assess candidates in tests during or preparatory to the recruitment process - AI used to make or materially influence decisions on promotion, termination, task allocation, and performance monitoring The classification is deliberately broad. A ranking algorithm embedded in an applicant tracking system is high-risk. A video interview platform that scores emotional affect is high-risk. A tool that generates a “culture fit” score from written applications is high-risk. The determining factor is not the technology — it is whether the system influences consequential employment decisions. **What is not high-risk:** Administrative tools that do not touch individual employment decisions — scheduling coordination, meeting room booking, general productivity AI — face only lighter general-purpose obligations and are not covered by Annex III. ## Who Is Affected — Providers and Deployers The AI Act distinguishes two categories with separate obligations: **Providers** (companies that develop and market recruitment AI) must conduct a conformity assessment, prepare a technical file, implement a quality management system, register the system in the EU database for high-risk AI, and affix CE marking before placing the product on the EU market. **Deployers** (German employers who use recruitment AI in their operations) must: - Use only CE-marked systems that comply with the AI Act - Implement human oversight as specified by the provider - Monitor for unexpected risks during actual use - Conduct a **fundamental rights impact assessment** before deploying high-risk AI affecting employment - Not operate the system in ways that exceed the intended purpose documented by the provider As a German employer, your primary AI Act exposure is as a **deployer**. If you build custom AI features into your HR processes using third-party models or APIs, you may additionally qualify as a **provider** for those custom components. ## High-Risk Obligations in Practice ### Technical documentation and conformity assessment For providers, the technical file must document the system’s intended purpose, architecture and development methodology, training data and testing approach, performance metrics across demographic subgroups, and risk management measures. This supports the conformity assessment — typically a self-assessment for most Annex III systems, or third-party review where warranted. As a deployer, ask your vendors for a summary of their technical documentation and CE marking status before contract renewal. Our [AI recruitment screening compliance guide](https://compound.law/en-DE/compliance/ai-recruitment-screening/) explains what documentation to request. ### Risk management and bias testing Article 9 requires a **continuous risk management system** throughout the AI system’s lifecycle. For recruitment AI, this means regular bias testing across gender, age, ethnic background, and disability status. A system that performs well on aggregate metrics but systematically disadvantages protected groups fails this requirement. Providers must publish their bias testing methodology and results as part of transparency obligations. Request this documentation before deployment and review it annually. ### Human oversight requirements Article 14 requires that high-risk AI systems allow **competent persons to effectively oversee** the system and intervene when necessary. For recruitment AI, this means: - HR staff must be trained to understand the system’s limitations and failure modes - There must be a genuine human review step — not an interface for rubber-stamping AI output - HR reviewers must have the practical ability to override, disregard, or correct the AI’s recommendation This obligation directly reinforces **GDPR Article 22**, which prohibits purely automated decisions with significant effects on applicants. The AI Act operationalises the human oversight requirement that GDPR already mandates. See our [AI recruitment compliance guide for Germany](https://compound.law/en-DE/news/ai-recruitment-germany/) for the full GDPR analysis. ### Transparency to candidates Under Article 13, deployers must inform candidates when a high-risk AI system is assessing their application, explain the system’s purpose at a level candidates can understand, and communicate their rights — including the GDPR Article 22(3) right to request human review. This information belongs in the applicant privacy notice before the recruitment process begins, not as an afterthought. ## GDPR and the AI Act — A Combined Obligation In German recruitment, two regulatory frameworks apply simultaneously and neither displaces the other: **GDPR Article 22** prohibits purely automated individual decisions with significant effects unless an exception applies (contract necessity, legal authorization, or explicit consent). Even where an exception applies, Article 22(3) requires safeguards including the right to human review and the ability to contest the decision. **BDSG Section 26** is the German legal basis for processing applicant data. It permits processing necessary to decide on establishing an employment relationship. Consent is rarely appropriate for applicant data given the employer-applicant power imbalance. Meeting the AI Act’s human oversight obligations does not automatically satisfy GDPR Article 22 — both must be addressed. A compliance checklist that covers only one framework leaves significant legal exposure. ## Works Council Rights Under BetrVG Section 87 For German employers with five or more employees, the **Betriebsrat (works council)** has **mandatory co-determination rights** under **BetrVG Section 87(1)(6)** over technical systems capable of monitoring worker behavior or performance. German labor courts have consistently held that AI-driven hiring and HR systems fall within this scope, even for applicants who are not yet employees. The rationale: such systems affect workforce composition, interact with HR employees who are employees, and typically remain in use for ongoing monitoring once an applicant joins. **In practice:** 1. Inform the works council before deploying any AI recruitment tool 2. Provide the technical documentation and vendor’s intended-use description 3. Negotiate a **Betriebsvereinbarung (works agreement)** covering data processed, retention periods, who sees outputs, the human review process, and candidate redress 4. If no agreement is reached, the employer cannot legally use the tool — the Betriebsrat cannot prevent hiring decisions, but it can block the specific system The AI Act’s fundamental rights impact assessment process aligns well with works council engagement. Running both in parallel is efficient and builds the documentation trail both frameworks require. ## What to Do Before August 2026 **August 2, 2026** is the compliance date for high-risk AI systems. Systems deployed after that date must comply on day one. Systems already in use have until **August 2, 2027** to achieve full compliance, but providers must register in the EU database and provider obligations activate from August 2, 2026. **Recommended steps for German employers:** 1. **Audit your HR tech stack.** Identify every tool with AI-enabled screening, ranking, scoring, or decision-support in hiring or employment decisions. 2. **Classify each tool.** Does it fall under AI Act Annex III? Engage legal counsel if uncertain — misclassification in either direction creates risk. 3. **Request vendor compliance roadmaps.** Ask for AI Act documentation now. Build non-compliance into contract renewal decisions. 4. **Conduct a DPIA.** A GDPR Article 35 Data Protection Impact Assessment is almost certainly required for systematic automated applicant profiling. 5. **Engage the works council early.** Early dialogue prevents delays at go-live and produces better Betriebsvereinbarung outcomes. 6. **Update candidate privacy notices.** Add AI Act transparency information now — it is already best practice and some supervisory authorities expect it before the 2026 deadline. Compound Law advises German employers on AI Act deployment obligations, DPIA scoping, and works council engagement for HR technology. For individual guidance, [speak with our team](https://compound.law/en-DE/#contact). *** *This guide provides general legal information. It does not constitute legal advice. Specific compliance questions — including works council negotiations, vendor contract reviews, and DPIA scoping — require individual legal counsel.* ## Related Industry Guides [![EU AI Act timeline Germany for 2 August 2026 2 December 2027 and 2 August 2028](https://compound.law/assets/images/ai-act/ai_act_1.webp)](https://compound.law/en-DE/ai-act/august-2026-deadline/) [ai-act](https://compound.law/en-DE/ai-act/august-2026-deadline/) ### [EU AI Act Timeline Germany: 2 August 2026, 2027 and 2028](https://compound.law/en-DE/ai-act/august-2026-deadline/) [EU AI Act 2 August 2026 is not the only date. German businesses need the split timeline for transparency, stand-alone high-risk AI, and product AI.](https://compound.law/en-DE/ai-act/august-2026-deadline/) [![EU AI Act compliance requirements for financial services firms in Germany](https://compound.law/assets/images/ai-act/ai_act_4.webp)](https://compound.law/en-DE/ai-act/financial-services/) [ai-act](https://compound.law/en-DE/ai-act/financial-services/) ### [EU AI Act Financial Services Compliance Guide for Germany (updated 2026)](https://compound.law/en-DE/ai-act/financial-services/) [Which AI systems are high-risk in financial services, what August 2026 deadlines mean for German banks, and a practical compliance checklist.](https://compound.law/en-DE/ai-act/financial-services/) [![EU AI Act high-risk insurance compliance Germany underwriting claims](https://compound.law/assets/images/ai-act/ai_act_4.webp)](https://compound.law/en-DE/ai-act/insurance/) [ai-act](https://compound.law/en-DE/ai-act/insurance/) ### [EU AI Act for German Insurers: High-Risk AI Compliance Guide](https://compound.law/en-DE/ai-act/insurance/) [EU AI Act classifies insurance AI as high-risk. Underwriting, pricing, and claims obligations for German insurers — with a practical compliance checklist.](https://compound.law/en-DE/ai-act/insurance/) ## Frequently asked questions Yes. AI used to screen, filter, or rank job applicants is explicitly listed as high-risk under EU AI Act Annex III, Section 4. This applies regardless of whether the tool is marketed as decision-support — if it influences consequential employment decisions, it is high-risk. High-risk recruitment AI must have: a technical file documenting design and performance, a risk management system including bias testing, human oversight measures that allow meaningful intervention, transparency to candidates about automated processing, and post-deployment monitoring. Full high-risk compliance is required from August 2, 2026 for new systems. Systems already in use before that date have until August 2, 2027 to comply, though providers must register in the EU database for high-risk AI from August 2, 2026. Yes, but employers must verify that the vendor has AI Act-compliant documentation — CE marking, technical file, conformity assessment. From August 2026, deploying a non-compliant high-risk tool exposes the employer to fines of up to €15 million or 3% of global annual turnover. The works council cannot veto the business decision to hire. But under BetrVG Section 87(1)(6), it has mandatory co-determination rights over technical monitoring systems. Without a Betriebsvereinbarung, using the tool can be legally blocked. ## Structured data ```json [ { "@context": "https://schema.org", "@type": [ "Organization", "LegalService" ], "@id": "https://compound.law/#organization", "name": "Compound Law", "alternateName": "Compound Law — AI Law Firm", "url": "https://compound.law/", "logo": { "@type": "ImageObject", "url": "https://compound.law/press/logos/PNG/Compound_Law_Icon.png", "width": 1024, "height": 1024 }, "image": "https://compound.law/assets/images/og-image.webp", "description": "The AI-native law firm in Berlin for start-ups, mid-sized companies and corporates: commercial and contract law, data protection, the EU AI Act, trademarks, corporate law, and restructuring and insolvency. A lawyer reviews every result, billed at a flat fee.", "foundingDate": "2026", "founder": [ { "@type": "Person", "name": "Marko Bradic", "jobTitle": "CEO", "url": "https://compound.law/en-DE/tech-team/marko-bradic/", "sameAs": [ "https://www.linkedin.com/in/markobradic/" ], "knowsAbout": [ "Product strategy and development", "Scaling technology companies", "FinTech and financial services", "AI-powered product innovation", "Business operations and growth", "Digital transformation" ] }, { "@type": "Person", "name": "Mohit Tilwani", "jobTitle": "CTO", "url": "https://compound.law/en-DE/tech-team/mohit-tilwani/", "sameAs": [ "https://www.linkedin.com/in/mohit-tilwani/" ], "knowsAbout": [ "Engineering leadership and architecture", "Scaling high-traffic systems", "AI and machine learning infrastructure", "FinTech platform development", "Cloud infrastructure and DevOps", "Product engineering" ] }, { "@type": "Person", "name": "Julian Jantze", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/julian-jantze/", "sameAs": [ "https://www.linkedin.com/in/julian-jantze-957b95158/" ], "knowsAbout": [ "Corporate law and corporate governance for technology companies", "Employment law and HR compliance", "EU AI Act compliance and AI governance", "Employee participation models (VSOP/ESOP)", "Regulatory compliance for tech companies", "Legal operations and Legal Tech implementation" ] } ], "employee": [ { "@type": "Person", "name": "Marko Bradic", "jobTitle": "CEO", "url": "https://compound.law/en-DE/tech-team/marko-bradic/", "sameAs": [ "https://www.linkedin.com/in/markobradic/" ], "knowsAbout": [ "Product strategy and development", "Scaling technology companies", "FinTech and financial services", "AI-powered product innovation", "Business operations and growth", "Digital transformation" ] }, { "@type": "Person", "name": "Mohit Tilwani", "jobTitle": "CTO", "url": "https://compound.law/en-DE/tech-team/mohit-tilwani/", "sameAs": [ "https://www.linkedin.com/in/mohit-tilwani/" ], "knowsAbout": [ "Engineering leadership and architecture", "Scaling high-traffic systems", "AI and machine learning infrastructure", "FinTech platform development", "Cloud infrastructure and DevOps", "Product engineering" ] }, { "@type": "Person", "name": "Julian Jantze", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/julian-jantze/", "sameAs": [ "https://www.linkedin.com/in/julian-jantze-957b95158/" ], "knowsAbout": [ "Corporate law and corporate governance for technology companies", "Employment law and HR compliance", "EU AI Act compliance and AI governance", "Employee participation models (VSOP/ESOP)", "Regulatory compliance for tech companies", "Legal operations and Legal Tech implementation" ] }, { "@type": "Person", "name": "Marc Schuba", "jobTitle": "Founding Partner, Rechtsanwalt (German attorney)", "url": "https://compound.law/en-DE/lawyers/marc-schuba/", "sameAs": [ "https://www.linkedin.com/in/marcschuba/" ], "knowsAbout": [ "IP and IT law", "SaaS and IT contracts, IT outsourcing", "Software and open-source licensing", "Data protection law (GDPR)", "AI law and the EU AI Act" ] }, { "@type": "Person", "name": "Dr. Markus Dreißigacker", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/markus-dreissigacker/", "sameAs": [ "https://www.linkedin.com/in/markusdreissigacker" ], "knowsAbout": [ "M&A (Due diligence, post-merger integration, IPO readiness)", "Corporate Law (Governance, board work, restructuring)", "Commercial Law (Customer contracts, supplier agreements, NDAs)", "IP (Trademark management, IP transfer agreements)", "Compliance & ESG (Global compliance programs, human rights, sustainability)", "Data Protection (GDPR strategy, DPO experience, privacy programs)" ] }, { "@type": "Person", "name": "Philipp Brandt", "jobTitle": "Partner, Rechtsanwalt (German attorney), Specialist Lawyer for Intellectual Property Law", "url": "https://compound.law/en-DE/lawyers/philipp-brandt/", "sameAs": [ "https://www.linkedin.com/in/philipp-brandt-81b446a/" ], "knowsAbout": [ "Restructuring and insolvency law (crisis advice for management, protective shield and insolvency plan proceedings, insolvency administration)", "Intellectual property (trademarks, unfair competition, copyright, trade secrets, licence agreements)", "Data protection law (data breaches, regulatory fine proceedings, access and damages claims)", "Distribution and commercial law (distribution agreements, acquisition and sale of industrial plants)" ] } ], "address": { "@type": "PostalAddress", "addressLocality": "Berlin", "addressCountry": "DE" }, "areaServed": [ "Germany", "Austria", "Switzerland", "European Union", "United Kingdom", "United States", "Singapore" ], "availableLanguage": [ "de", "en" ], "serviceType": [ "AI law firm", "AI-native legal services", "legal counsel for start-ups and growth companies", "legal counsel for mid-sized companies and corporates", "Commercial Law", "Corporate Law", "Employment Law", "Regulatory & Compliance", "Intellectual Property", "Insolvency & Restructuring" ], "hasOfferCatalog": { "@type": "OfferCatalog", "name": "Compound Law services", "itemListElement": [ { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Commercial Contracts", "description": "Battle-tested contracts for your sales process", "serviceType": [ "enterprise contracts", "MSA", "DPA", "sales contracts" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "International Employment", "description": "Compliant hiring across borders", "serviceType": [ "international employment", "hiring abroad", "employment contracts" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "VSOP/ESOP Setup", "description": "Employee participation that actually works", "serviceType": [ "VSOP", "ESOP", "employee stock options", "equity incentives" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Funding Round Support", "description": "Clean legal for your next raise", "serviceType": [ "funding round", "term sheet", "SHA", "due diligence", "cap table" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Corporate Housekeeping", "description": "Get your legal house in order", "serviceType": [ "corporate governance", "board resolutions", "shareholder register" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Data Protection & Privacy", "description": "GDPR compliance that doesn't slow you down", "serviceType": [ "GDPR", "data protection", "privacy", "DPA", "cookies", "data breach response", "GDPR fines", "Art. 82 GDPR" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "AI Act Compliance", "description": "Navigate EU AI regulation", "serviceType": [ "AI Act", "AI compliance", "AI governance", "EU AI regulation" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "IP & Competition", "description": "Protect and enforce what you've built", "serviceType": [ "IP protection", "intellectual property", "trademarks", "trademark enforcement", "warning letters", "preliminary injunctions", "unfair competition", "software licensing", "open source compliance" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Fractional General Counsel", "description": "In-house legal without the full-time cost", "serviceType": [ "fractional GC", "fractional general counsel", "outsourced legal", "legal retainer" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "FinTech Compliance", "description": "Navigate financial regulation", "serviceType": [ "fintech compliance", "BaFin", "banking regulation", "AML", "KYC" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Legal Retainer", "description": "Predictable legal support when you need it", "serviceType": [ "legal retainer", "legal subscription", "ongoing legal support" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "M&A Preparation", "description": "Get ready for acquisition interest", "serviceType": [ "M&A preparation", "acquisition", "due diligence", "exit" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Restructuring & Insolvency", "description": "From the first liquidity check to the restructuring itself", "serviceType": [ "restructuring", "insolvency", "StaRUG", "self-administration", "insolvency plan", "director liability" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } } ] }, "contactPoint": { "@type": "ContactPoint", "contactType": "sales", "email": "contact@compound.law", "availableLanguage": [ "English", "German" ], "areaServed": [ "DE", "AT", "CH", "EU", "GB", "US", "SG" ] }, "email": "contact@compound.law", "sameAs": [ "https://www.linkedin.com/company/compoundlawfirm", "https://x.com/CompoundLawFirm" ], "knowsAbout": [ "Commercial Contracts", "enterprise contracts", "MSA", "DPA", "sales contracts", "International Employment", "international employment", "hiring abroad", "employment contracts", "VSOP/ESOP Setup", "VSOP", "ESOP", "employee stock options", "equity incentives", "Funding Round Support", "funding round", "term sheet", "SHA", "due diligence", "cap table", "Corporate Housekeeping", "corporate governance", "board resolutions", "shareholder register", "Data Protection & Privacy", "GDPR", "data protection", "privacy", "cookies", "data breach response", "GDPR fines", "Art. 82 GDPR", "AI Act Compliance", "AI Act", "AI compliance", "AI governance", "EU AI regulation", "IP & Competition", "IP protection", "intellectual property", "trademarks", "trademark enforcement", "warning letters", "preliminary injunctions", "unfair competition", "software licensing", "open source compliance", "Fractional General Counsel", "fractional GC", "fractional general counsel", "outsourced legal", "legal retainer", "FinTech Compliance", "fintech compliance", "BaFin", "banking regulation", "AML", "KYC", "Legal Retainer", "legal subscription", "ongoing legal support", "M&A Preparation", "M&A preparation", "acquisition", "exit", "Restructuring & Insolvency", "restructuring", "insolvency", "StaRUG", "self-administration", "insolvency plan", "director liability" ] }, { "@context": "https://schema.org", "@type": "Article", "headline": "EU AI Act and Recruitment AI in Germany: Compliance Guide (2026)", "description": "AI recruitment tools in Germany are high-risk under EU AI Act Annex III. What employers need to comply before the August 2026 deadline.", "image": "https://compound.law/assets/images/ai-act/ai_act_2.webp", "datePublished": "2026-04-16T00:00:00.000Z", "dateModified": "2026-04-16T00:00:00.000Z", "author": { "@type": "Person", "name": "Dr. Markus Dreißigacker", "image": "https://compound.law/assets/images/team/markusdreissigacker.webp" }, "publisher": { "@type": "Organization", "@id": "https://compound.law/#organization", "name": "Compound Law" }, "mainEntityOfPage": { "@type": "WebPage", "@id": "https://compound.law/en-DE/ai-act/recruitment/" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://compound.law/en-DE/" }, { "@type": "ListItem", "position": 2, "name": "AI Act by Industry", "item": "https://compound.law/en-DE/ai-act/" }, { "@type": "ListItem", "position": 3, "name": "EU AI Act and Recruitment AI in Germany: Compliance Guide", "item": "https://compound.law/en-DE/ai-act/recruitment/" } ] }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "Is CV screening AI high-risk under the EU AI Act?", "acceptedAnswer": { "@type": "Answer", "text": "Yes. AI used to screen, filter, or rank job applicants is explicitly listed as high-risk under EU AI Act Annex III, Section 4. This applies regardless of whether the tool is marketed as decision-support — if it influences consequential employment decisions, it is high-risk." } }, { "@type": "Question", "name": "What does the EU AI Act require for high-risk recruitment AI?", "acceptedAnswer": { "@type": "Answer", "text": "High-risk recruitment AI must have: a technical file documenting design and performance, a risk management system including bias testing, human oversight measures that allow meaningful intervention, transparency to candidates about automated processing, and post-deployment monitoring." } }, { "@type": "Question", "name": "When do EU AI Act obligations apply to recruitment AI?", "acceptedAnswer": { "@type": "Answer", "text": "Full high-risk compliance is required from August 2, 2026 for new systems. Systems already in use before that date have until August 2, 2027 to comply, though providers must register in the EU database for high-risk AI from August 2, 2026." } }, { "@type": "Question", "name": "Can German employers continue using Workday or SAP SuccessFactors AI features?", "acceptedAnswer": { "@type": "Answer", "text": "Yes, but employers must verify that the vendor has AI Act-compliant documentation — CE marking, technical file, conformity assessment. From August 2026, deploying a non-compliant high-risk tool exposes the employer to fines of up to €15 million or 3% of global annual turnover." } }, { "@type": "Question", "name": "Do works councils have to agree before an employer introduces AI recruitment tools?", "acceptedAnswer": { "@type": "Answer", "text": "The works council cannot veto the business decision to hire. But under BetrVG Section 87(1)(6), it has mandatory co-determination rights over technical monitoring systems. Without a Betriebsvereinbarung, using the tool can be legally blocked." } } ] } ] ```