--- title: "AI Hiring Tools in Germany: EU AI Act, GDPR and Works Council (2026)" description: "AI hiring tools in Germany need EU AI Act, GDPR Article 22, DPIA, and works council review before rollout. Use this buyer checklist before procurement." image: "https://compound.law/assets/images/og-image-en.webp" source: "https://compound.law/en-DE/compliance/ai-hiring-tools/" language: "en" --- ![AI hiring tools compliance checklist for Germany](https://compound.law/assets/images/compliance/compliance_4.webp) compliance # AI Hiring Tools in Germany: EU AI Act, GDPR and Works Council (2026) 22 June 2026 Short answer AI hiring tools in Germany can be used only with careful procurement and deployment controls. If a tool ranks, scores, or materially influences candidate selection, German employers should treat it as a high-risk employment AI use case and require provider documentation, GDPR Article 22 safeguards, DPIA review, bias testing evidence, and works council alignment before rollout. - AI tools that score, rank, or filter candidates should be treated as high-risk employment AI in Germany. - Buyers should request the provider's conformity documents, intended-use limits, and bias testing evidence before signing. - GDPR Article 22, Article 35 DPIA review, and DPA plus transfer analysis usually run in parallel. - A works council package under Section 87 BetrVG should be prepared before pilot rollout, not after purchase. **AI hiring tools** are usable in Germany only if the employer buys and deploys them with the right legal controls. If the tool **scores, ranks, filters, or materially influences candidate selection**, treat it as a high-risk employment AI use case and require provider evidence, **GDPR Article 22** safeguards, **Article 35 DPIA** review, and **Betriebsrat** alignment before rollout. That answer matters because the search term `ai hiring tools` often leads buyers to generic software roundups. German employers need a different filter: not “which product has the best automation”, but **which AI hiring tool can be used without creating avoidable EU AI Act, GDPR, AGG, and labor-law risk**. ## Quick Buyer Verdict Before You Buy Use this short checklist before demos move into procurement: | Question | Why it matters | Buyer action | | ------------------------------------------------------------ | ----------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------ | | Does the tool rank, score, or recommend candidates? | This is the feature set most likely to trigger high-risk employment analysis. | Ask for the exact decision logic and intended-use statement. | | Can a recruiter override the output in a meaningful way? | Nominal human sign-off is not enough for Article 22 risk control. | Require a documented review and override workflow. | | Has the provider documented bias testing and data limits? | Hiring AI can create AGG and EU AI Act exposure if bias evidence is weak. | Request test methodology, monitoring cadence, and known limits. | | Will candidate data leave the EEA or be reused for training? | International transfers and product-improvement clauses create GDPR risk. | Review the DPA, subprocessors, and transfer posture before signature. | | Is a works council likely to be involved? | Section 87 BetrVG issues are easier to solve before rollout than after procurement. | Prepare a works council package early, including purpose, data scope, and human oversight. | For the contract layer behind that checklist, see our guides on [AI vendor due diligence in Germany](https://compound.law/en-DE/compliance/ai-vendor-due-diligence-germany/), [GDPR AI procurement](https://compound.law/en-DE/compliance/gdpr-ai-procurement/), and [EU AI Act procurement requirements for German enterprises](https://compound.law/en-DE/compliance/eu-ai-act-procurement-requirements-german-enterprises/). ## What Counts as an AI Hiring Tool? An AI hiring tool is any software used in recruitment that generates predictions, recommendations, scores, rankings, or other outputs that influence hiring decisions. In practice, that usually includes: - CV screening and candidate ranking - Interview analysis or interview scoring - Skill-matching or fit-scoring engines - Recommendation systems for shortlist creation - Automated rejection or escalation workflows tied to scores - Assessment tools that claim to predict performance, retention, or suitability The label does not control the legal answer. A vendor may call the product **AI recruiting software**, **talent intelligence**, **candidate matching**, or **workflow automation**. For German employers, the real question is whether the system materially affects who advances, who is rejected, or how recruiters evaluate a candidate. ### AI Hiring Tools vs. AI Recruiting Software Legally, there is usually no decisive difference between **AI hiring tools** and **AI recruiting software**. The same product may contain both low-risk and higher-risk features. Examples: - A chatbot that only schedules interviews is generally easier to justify. - A matching engine that produces a hidden score for every candidate is much riskier. - A video tool that analyzes tone, facial movement, or behavior can trigger additional privacy and discrimination concerns. That is why procurement should split the product into features, not buy the entire category based on marketing language. ## Which AI Hiring Tool Uses Are High-Risk? The core EU AI Act question is whether the system falls into the employment category in **Annex III** because it meaningfully supports decisions about access to employment, recruitment, or worker management. If it does, buyers should assume a high documentation and governance burden. ### Common Recruitment Uses and Their Practical Risk Level | Use case | Practical risk level | Why | | ---------------------------------------------------------------- | -------------------- | ----------------------------------------------------------------------------- | | Interview scheduling, reminder emails, admin workflow automation | Lower | These features usually do not decide who is selected. | | Grammar or format checks on job ads | Lower | They affect content production, not candidate evaluation. | | CV ranking, candidate scoring, shortlist recommendations | High | They materially influence who progresses in the process. | | Video interview analysis of behavior, tone, or facial signals | High | They affect selection and may involve special-category or biometric concerns. | | Predictive fit or performance scoring | High | These models can be opaque and discrimination-sensitive. | | Automated reject/advance decisions tied to thresholds | Very high | This creates acute Article 22 and AGG risk. | Recruiters often say, “a human still makes the final decision.” That alone does not solve the issue. If the AI output shapes the shortlist, frames the interview, or creates a de facto reject signal, the system still matters legally. ### The Timing Point Buyers Should Not Miss German buyers should also separate the **procurement question** from the **application-date question**. Our broader [EU AI Act timeline guide](https://compound.law/en-DE/compliance/eu-ai-act-august-2026-deadline-checklist/) explains the current split between **2 August 2026** for major framework obligations and the Commission’s current **2 December 2027** timing for stand-alone Annex III employment systems. The practical lesson is simple: procurement diligence should start now even if a specific high-risk employment date is later than older summaries suggested. ## Buyer Checklist Before Procurement This is the section most teams should use in live vendor review. If your legal, HR, and procurement teams cannot answer these points before signing, the tool is not ready. ### 1. Provider Conformity Declaration and Intended Use Ask the provider to explain exactly what the system is meant to do and how they classify it. The minimum document pack should usually include: - intended-use description - instructions for use and human oversight guidance - technical documentation or a summary suitable for deployers - conformity documentation where the provider says it is available - system limitations, known failure modes, and update policy If the vendor cannot describe what counts as the “decision-influencing” feature, that is already a warning sign. A buyer should not be the first party to notice that the product scores candidates. ### 2. Training Data and Bias Testing Evidence For German employers, **bias testing** is not a nice-to-have. It sits at the intersection of the EU AI Act, the **AGG**, and general defensibility in discrimination disputes. Ask for: - what data the model was trained or calibrated on - whether protected-class proxies were assessed - how false positives and false negatives are measured - whether the provider tests by market, language, or job type - how often the system is re-tested after updates Do not accept broad claims such as “our model reduces bias” without methodology. A serious buyer should expect evidence about how the provider identified skew, what they measured, and which limitations remain. ### 3. DPA, Subprocessors, and Transfer Posture The privacy review belongs in procurement, not after rollout. Many AI hiring tools process CVs, interview notes, contact data, and assessment outputs through multiple service layers. Review at least: - the **Data Processing Agreement** - the list of subprocessors - hosting locations - whether candidate data is reused for training or product improvement - deletion timelines and log retention - transfer safeguards if data leaves the EEA If a provider uses candidate data for model improvement, that point must be made explicit and analyzed carefully. In some buyer-side deployments, that clause alone changes whether the product is acceptable. ### 4. GDPR Article 22 Human Review Design The decisive Article 22 question is not whether a person is somewhere in the workflow. The question is whether the human review is **real**. A defensible review model usually includes: - a recruiter who sees the underlying factors, not just a score - authority to override or ignore the recommendation - a documented path for contesting or rechecking a result - training for internal users on the limits of the tool - retention of enough evidence to explain how a decision was made If the workflow is “the recruiter only reviews candidates above the AI threshold”, you may still have a serious automation problem. For adjacent assessment questions, see our [AI recruitment screening guide](https://compound.law/en-DE/compliance/ai-recruitment-screening/). ### 5. Article 35 DPIA and Broader Risk Assessment AI hiring tools often justify an **Article 35 GDPR Data Protection Impact Assessment** because they involve systematic evaluation, profiling, or other high-impact processing. Even where the DPIA conclusion is that the risk is manageable, the exercise forces the buyer to document purpose, necessity, safeguards, and residual risk. In practice, a workable DPIA workflow for AI hiring should connect to: - data mapping - retention and deletion rules - access-control design - candidate transparency notices - incident and complaint handling - escalation if the model is updated or repurposed If you need a broader governance frame for this step, our [AI risk assessment guide](https://compound.law/en-DE/compliance/ai-risk-assessment/) is the closest current explainer in the repository. ### 6. Works Council Package for Germany For employers with a **works council**, the biggest operational mistake is waiting until the product is selected before opening the labor-law track. If the tool can be used to evaluate behavior, performance, or candidate suitability in a way that affects employment decisions, **Section 87(1) no. 6 BetrVG** is commonly relevant. A practical works council package should cover: 1. the exact purpose of the tool 2. which data is processed and excluded 3. who can see scores, rankings, or interview outputs 4. how human review works 5. whether outputs can be used for internal mobility or promotion decisions 6. retention and deletion rules 7. audit and review intervals This overlap is one reason to cross-read our [AI employee monitoring guide](https://compound.law/en-DE/compliance/ai-employee-monitoring/), especially where recruitment tooling may later be reused for worker evaluation or internal staffing. ## Red Flags in Vendor Claims About “AI Recruiting” Many vendor pages are built to shorten procurement, not to answer German legal questions. These are common warning signs: - **“Bias-free hiring” claims without methodology.** Bias can be reduced, monitored, and documented. It cannot be marketed away. - **No clear answer on training data or retraining.** If the provider cannot explain how models are updated, the risk is not controlled. - **Human oversight described only as a checkbox.** Oversight must be substantive, not ceremonial. - **Silence on subprocessors or hosting.** If your DPA review depends on multiple follow-up emails, the vendor is not procurement-ready. - **Claims that the software is “not really AI”.** If it predicts, recommends, or scores in a way that influences hiring, the label will not rescue the deployment. - **Promises that provider compliance solves employer liability.** It does not. The employer still owns the use case, internal access, notices, retention, and labor-law path. Where the vendor pitch sounds cleaner than the implementation reality, slow the deal down. That is usually cheaper than defending a weak rollout later. ## Practical Position for German Employers If your business wants to use AI hiring tools, the most defensible approach is to treat the product as a **procurement-controlled compliance project**, not a feature purchase. The right sequence is: 1. classify the feature set 2. collect provider evidence 3. map GDPR and DPIA requirements 4. design real human review 5. prepare works council materials where relevant 6. only then approve rollout That sequence is slower than a normal SaaS buy, but it is much faster than trying to retrofit compliance after recruiters are already relying on scores they cannot explain. ## CTA: Review the Tool Before You Roll It Out If your HR or procurement team is evaluating AI hiring tools for Germany, treat this page as a first-pass legal checklist, not as specific legal advice for a concrete deployment. Compound Law helps employers review provider documents, structure **GDPR** and **EU AI Act** workstreams, and prepare **works council** materials before rollout. You can also continue with the adjacent guides on [GDPR AI procurement](https://compound.law/en-DE/compliance/gdpr-ai-procurement/), [AI vendor due diligence in Germany](https://compound.law/en-DE/compliance/ai-vendor-due-diligence-germany/), and the localized counterpart at [/de-DE/compliance/ai-hiring-tools/](https://compound.law/de-DE/compliance/ai-hiring-tools/). ## FAQ ### Are AI hiring tools legal in Germany? Yes, but legality depends on the feature set and deployment model. A scheduling assistant is different from a candidate-scoring engine. The more the software influences who is shortlisted, interviewed, or rejected, the more likely it is that EU AI Act, GDPR, AGG, and works council controls must be handled in detail. ### Are AI hiring tools always high-risk under the EU AI Act? No. A narrow administrative feature is not the same as a decision-support engine. German employers should focus on whether the software materially influences access to employment, because that is the point where Annex III employment analysis becomes much more relevant in practice. ### Do we need a DPIA for AI recruiting software? Often yes. AI recruiting tools commonly involve systematic evaluation, profiling, or high-impact processing of candidate data. Even when a DPIA does not end the project, it usually forces the right internal questions about data scope, necessity, retention, access rights, and safeguards before the tool goes live. ### Does GDPR Article 22 block AI-supported hiring? Not automatically. What it blocks is a decision based solely on automated processing with similarly significant effects, unless a narrow exception applies and the required safeguards are in place. A meaningful human review path, explanation capability, and contest mechanism are therefore central to a lawful deployment. ### Does a German works council need to approve AI hiring tools? In many cases, yes. If the system evaluates behavior or performance, or if it materially affects employment decisions, a works council is likely to expect involvement under Section 87 BetrVG. The safest operational approach is to prepare the labor-law package before the pilot starts rather than after the tool has been selected. ### Are AI hiring tools and AI recruiting software legally different? Usually not in a meaningful way. These labels describe overlapping products. German employers should ignore the marketing distinction and assess the actual functions: scoring, ranking, interview analysis, automation logic, hosting model, and human review design. ## Related Compliance Guides [![GDPR-compliant AI implementation for businesses in Germany](https://compound.law/assets/images/compliance/compliance_1.webp)](https://compound.law/en-DE/compliance/gdpr-compliant-ai-businesses-germany/) [Guides](https://compound.law/en-DE/compliance/gdpr-compliant-ai-businesses-germany/) ### [GDPR-Compliant AI in Germany: A Practical Guide for 2026](https://compound.law/en-DE/compliance/gdpr-compliant-ai-businesses-germany/) [GDPR-compliant AI means a lawful basis, transparency, a DPA, controlled transfers and a DPIA where risk is high. The 2026 guide for German companies.](https://compound.law/en-DE/compliance/gdpr-compliant-ai-businesses-germany/) [![EU AI Act training obligation and Article 4 AI literacy in Germany](https://compound.law/assets/images/compliance/compliance_2.webp)](https://compound.law/en-DE/compliance/ai-act-schulungspflicht/) [compliance](https://compound.law/en-DE/compliance/ai-act-schulungspflicht/) ### [EU AI Act Training Obligation: What Article 4 Requires](https://compound.law/en-DE/compliance/ai-act-schulungspflicht/) [EU AI Act training obligation under Article 4: who it covers in Germany, what AI literacy measures to implement, and how to document compliance.](https://compound.law/en-DE/compliance/ai-act-schulungspflicht/) [![AI legal counsel in Germany for company AI procurement](https://compound.law/assets/images/compliance/compliance_3.webp)](https://compound.law/en-DE/compliance/ai-legal-counsel-germany/) [Guides](https://compound.law/en-DE/compliance/ai-legal-counsel-germany/) ### [AI Legal Counsel in Germany for Companies](https://compound.law/en-DE/compliance/ai-legal-counsel-germany/) [AI legal counsel in Germany helps companies handle EU AI Act, GDPR, DPA, procurement, and rollout risk before signing or launching AI tools.](https://compound.law/en-DE/compliance/ai-legal-counsel-germany/) ## Frequently asked questions Yes, but not on a plug-and-play basis. German employers can use AI hiring tools if the specific use case is classified correctly, human review is real, privacy documentation is in place, and works council rights are handled where relevant. Not every HR feature is high-risk. The risk rises sharply where the system scores, ranks, filters, or otherwise materially influences who is shortlisted, interviewed, or rejected. Scheduling or grammar tools are easier to defend than candidate assessment engines. Often yes. AI recruiting tools commonly involve systematic evaluation, profiling, or special-category risk indicators, which makes Article 35 GDPR review a live question before rollout rather than after procurement. It does not block all AI support, but it does restrict decisions based solely on automated processing that have similarly significant effects. A meaningful human review path, contest route, and documented override process are therefore critical. In many cases, yes. If the tool can be used to evaluate behaviour or performance, or if it shapes employment decisions, Section 87(1) no. 6 BetrVG is commonly engaged and a works council package should be prepared early. Usually not in practice. German employers should assess the actual function of the tool, not the marketing label. If the software materially affects candidate selection, the same EU AI Act, GDPR, AGG, and works council questions arise. ## Structured data ```json [ { "@context": "https://schema.org", "@type": [ "Organization", "LegalService" ], "@id": "https://compound.law/#organization", "name": "Compound Law", "alternateName": "Compound Law — AI Law Firm", "url": "https://compound.law/", "logo": { "@type": "ImageObject", "url": "https://compound.law/press/logos/PNG/Compound_Law_Icon.png", "width": 1024, "height": 1024 }, "image": "https://compound.law/assets/images/og-image.webp", "description": "The AI-native law firm in Berlin for start-ups, mid-sized companies and corporates: commercial and contract law, data protection, the EU AI Act, trademarks, corporate law, and restructuring and insolvency. A lawyer reviews every result, billed at a flat fee.", "foundingDate": "2026", "founder": [ { "@type": "Person", "name": "Marko Bradic", "jobTitle": "CEO", "url": "https://compound.law/en-DE/tech-team/marko-bradic/", "sameAs": [ "https://www.linkedin.com/in/markobradic/" ], "knowsAbout": [ "Product strategy and development", "Scaling technology companies", "FinTech and financial services", "AI-powered product innovation", "Business operations and growth", "Digital transformation" ] }, { "@type": "Person", "name": "Mohit Tilwani", "jobTitle": "CTO", "url": "https://compound.law/en-DE/tech-team/mohit-tilwani/", "sameAs": [ "https://www.linkedin.com/in/mohit-tilwani/" ], "knowsAbout": [ "Engineering leadership and architecture", "Scaling high-traffic systems", "AI and machine learning infrastructure", "FinTech platform development", "Cloud infrastructure and DevOps", "Product engineering" ] }, { "@type": "Person", "name": "Julian Jantze", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/julian-jantze/", "sameAs": [ "https://www.linkedin.com/in/julian-jantze-957b95158/" ], "knowsAbout": [ "Corporate law and corporate governance for technology companies", "Employment law and HR compliance", "EU AI Act compliance and AI governance", "Employee participation models (VSOP/ESOP)", "Regulatory compliance for tech companies", "Legal operations and Legal Tech implementation" ] } ], "employee": [ { "@type": "Person", "name": "Marko Bradic", "jobTitle": "CEO", "url": "https://compound.law/en-DE/tech-team/marko-bradic/", "sameAs": [ "https://www.linkedin.com/in/markobradic/" ], "knowsAbout": [ "Product strategy and development", "Scaling technology companies", "FinTech and financial services", "AI-powered product innovation", "Business operations and growth", "Digital transformation" ] }, { "@type": "Person", "name": "Mohit Tilwani", "jobTitle": "CTO", "url": "https://compound.law/en-DE/tech-team/mohit-tilwani/", "sameAs": [ "https://www.linkedin.com/in/mohit-tilwani/" ], "knowsAbout": [ "Engineering leadership and architecture", "Scaling high-traffic systems", "AI and machine learning infrastructure", "FinTech platform development", "Cloud infrastructure and DevOps", "Product engineering" ] }, { "@type": "Person", "name": "Julian Jantze", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/julian-jantze/", "sameAs": [ "https://www.linkedin.com/in/julian-jantze-957b95158/" ], "knowsAbout": [ "Corporate law and corporate governance for technology companies", "Employment law and HR compliance", "EU AI Act compliance and AI governance", "Employee participation models (VSOP/ESOP)", "Regulatory compliance for tech companies", "Legal operations and Legal Tech implementation" ] }, { "@type": "Person", "name": "Marc Schuba", "jobTitle": "Founding Partner, Rechtsanwalt (German attorney)", "url": "https://compound.law/en-DE/lawyers/marc-schuba/", "sameAs": [ "https://www.linkedin.com/in/marcschuba/" ], "knowsAbout": [ "IP and IT law", "SaaS and IT contracts, IT outsourcing", "Software and open-source licensing", "Data protection law (GDPR)", "AI law and the EU AI Act" ] }, { "@type": "Person", "name": "Dr. Markus Dreißigacker", "jobTitle": "Rechtsanwalt", "url": "https://compound.law/en-DE/lawyers/markus-dreissigacker/", "sameAs": [ "https://www.linkedin.com/in/markusdreissigacker" ], "knowsAbout": [ "M&A (Due diligence, post-merger integration, IPO readiness)", "Corporate Law (Governance, board work, restructuring)", "Commercial Law (Customer contracts, supplier agreements, NDAs)", "IP (Trademark management, IP transfer agreements)", "Compliance & ESG (Global compliance programs, human rights, sustainability)", "Data Protection (GDPR strategy, DPO experience, privacy programs)" ] }, { "@type": "Person", "name": "Philipp Brandt", "jobTitle": "Partner, Rechtsanwalt (German attorney), Specialist Lawyer for Intellectual Property Law", "url": "https://compound.law/en-DE/lawyers/philipp-brandt/", "sameAs": [ "https://www.linkedin.com/in/philipp-brandt-81b446a/" ], "knowsAbout": [ "Restructuring and insolvency law (crisis advice for management, protective shield and insolvency plan proceedings, insolvency administration)", "Intellectual property (trademarks, unfair competition, copyright, trade secrets, licence agreements)", "Data protection law (data breaches, regulatory fine proceedings, access and damages claims)", "Distribution and commercial law (distribution agreements, acquisition and sale of industrial plants)" ] } ], "address": { "@type": "PostalAddress", "addressLocality": "Berlin", "addressCountry": "DE" }, "areaServed": [ "Germany", "Austria", "Switzerland", "European Union", "United Kingdom", "United States", "Singapore" ], "availableLanguage": [ "de", "en" ], "serviceType": [ "AI law firm", "AI-native legal services", "legal counsel for start-ups and growth companies", "legal counsel for mid-sized companies and corporates", "Commercial Law", "Corporate Law", "Employment Law", "Regulatory & Compliance", "Intellectual Property", "Insolvency & Restructuring" ], "hasOfferCatalog": { "@type": "OfferCatalog", "name": "Compound Law services", "itemListElement": [ { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Commercial Contracts", "description": "Battle-tested contracts for your sales process", "serviceType": [ "enterprise contracts", "MSA", "DPA", "sales contracts" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "International Employment", "description": "Compliant hiring across borders", "serviceType": [ "international employment", "hiring abroad", "employment contracts" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "VSOP/ESOP Setup", "description": "Employee participation that actually works", "serviceType": [ "VSOP", "ESOP", "employee stock options", "equity incentives" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Funding Round Support", "description": "Clean legal for your next raise", "serviceType": [ "funding round", "term sheet", "SHA", "due diligence", "cap table" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Corporate Housekeeping", "description": "Get your legal house in order", "serviceType": [ "corporate governance", "board resolutions", "shareholder register" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Data Protection & Privacy", "description": "GDPR compliance that doesn't slow you down", "serviceType": [ "GDPR", "data protection", "privacy", "DPA", "cookies", "data breach response", "GDPR fines", "Art. 82 GDPR" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "AI Act Compliance", "description": "Navigate EU AI regulation", "serviceType": [ "AI Act", "AI compliance", "AI governance", "EU AI regulation" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "IP & Competition", "description": "Protect and enforce what you've built", "serviceType": [ "IP protection", "intellectual property", "trademarks", "trademark enforcement", "warning letters", "preliminary injunctions", "unfair competition", "software licensing", "open source compliance" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Fractional General Counsel", "description": "In-house legal without the full-time cost", "serviceType": [ "fractional GC", "fractional general counsel", "outsourced legal", "legal retainer" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "FinTech Compliance", "description": "Navigate financial regulation", "serviceType": [ "fintech compliance", "BaFin", "banking regulation", "AML", "KYC" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Legal Retainer", "description": "Predictable legal support when you need it", "serviceType": [ "legal retainer", "legal subscription", "ongoing legal support" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "M&A Preparation", "description": "Get ready for acquisition interest", "serviceType": [ "M&A preparation", "acquisition", "due diligence", "exit" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } }, { "@type": "Offer", "itemOffered": { "@type": "Service", "name": "Restructuring & Insolvency", "description": "From the first liquidity check to the restructuring itself", "serviceType": [ "restructuring", "insolvency", "StaRUG", "self-administration", "insolvency plan", "director liability" ], "areaServed": [ "Germany", "European Union", "United Kingdom", "United States", "Singapore" ] } } ] }, "contactPoint": { "@type": "ContactPoint", "contactType": "sales", "email": "contact@compound.law", "availableLanguage": [ "English", "German" ], "areaServed": [ "DE", "AT", "CH", "EU", "GB", "US", "SG" ] }, "email": "contact@compound.law", "sameAs": [ "https://www.linkedin.com/company/compoundlawfirm", "https://x.com/CompoundLawFirm" ], "knowsAbout": [ "Commercial Contracts", "enterprise contracts", "MSA", "DPA", "sales contracts", "International Employment", "international employment", "hiring abroad", "employment contracts", "VSOP/ESOP Setup", "VSOP", "ESOP", "employee stock options", "equity incentives", "Funding Round Support", "funding round", "term sheet", "SHA", "due diligence", "cap table", "Corporate Housekeeping", "corporate governance", "board resolutions", "shareholder register", "Data Protection & Privacy", "GDPR", "data protection", "privacy", "cookies", "data breach response", "GDPR fines", "Art. 82 GDPR", "AI Act Compliance", "AI Act", "AI compliance", "AI governance", "EU AI regulation", "IP & Competition", "IP protection", "intellectual property", "trademarks", "trademark enforcement", "warning letters", "preliminary injunctions", "unfair competition", "software licensing", "open source compliance", "Fractional General Counsel", "fractional GC", "fractional general counsel", "outsourced legal", "legal retainer", "FinTech Compliance", "fintech compliance", "BaFin", "banking regulation", "AML", "KYC", "Legal Retainer", "legal subscription", "ongoing legal support", "M&A Preparation", "M&A preparation", "acquisition", "exit", "Restructuring & Insolvency", "restructuring", "insolvency", "StaRUG", "self-administration", "insolvency plan", "director liability" ] }, { "@context": "https://schema.org", "@type": "Article", "headline": "AI Hiring Tools in Germany: EU AI Act, GDPR and Works Council (2026)", "description": "AI hiring tools in Germany need EU AI Act, GDPR Article 22, DPIA, and works council review before rollout. Use this buyer checklist before procurement.", "image": "https://compound.law/assets/images/compliance/compliance_4.webp", "datePublished": "2026-06-22T00:00:00.000Z", "dateModified": "2026-06-22T00:00:00.000Z", "author": { "@type": "Person", "name": "Dr. Markus Dreißigacker", "image": "https://compound.law/assets/images/team/markusdreissigacker.webp" }, "publisher": { "@type": "Organization", "@id": "https://compound.law/#organization", "name": "Compound Law" }, "mainEntityOfPage": { "@type": "WebPage", "@id": "https://compound.law/en-DE/compliance/ai-hiring-tools/" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://compound.law/en-DE/" }, { "@type": "ListItem", "position": 2, "name": "Compliance Guides", "item": "https://compound.law/en-DE/compliance/" }, { "@type": "ListItem", "position": 3, "name": "AI Hiring Tools in Germany: EU AI Act, GDPR and Works Council", "item": "https://compound.law/en-DE/compliance/ai-hiring-tools/" } ] }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "Are AI hiring tools legal in Germany?", "acceptedAnswer": { "@type": "Answer", "text": "Yes, but not on a plug-and-play basis. German employers can use AI hiring tools if the specific use case is classified correctly, human review is real, privacy documentation is in place, and works council rights are handled where relevant." } }, { "@type": "Question", "name": "Are AI hiring tools always high-risk under the EU AI Act?", "acceptedAnswer": { "@type": "Answer", "text": "Not every HR feature is high-risk. The risk rises sharply where the system scores, ranks, filters, or otherwise materially influences who is shortlisted, interviewed, or rejected. Scheduling or grammar tools are easier to defend than candidate assessment engines." } }, { "@type": "Question", "name": "Do we need a DPIA for AI recruiting software?", "acceptedAnswer": { "@type": "Answer", "text": "Often yes. AI recruiting tools commonly involve systematic evaluation, profiling, or special-category risk indicators, which makes Article 35 GDPR review a live question before rollout rather than after procurement." } }, { "@type": "Question", "name": "Does GDPR Article 22 block AI-supported hiring?", "acceptedAnswer": { "@type": "Answer", "text": "It does not block all AI support, but it does restrict decisions based solely on automated processing that have similarly significant effects. A meaningful human review path, contest route, and documented override process are therefore critical." } }, { "@type": "Question", "name": "Does a German works council need to approve AI hiring tools?", "acceptedAnswer": { "@type": "Answer", "text": "In many cases, yes. If the tool can be used to evaluate behaviour or performance, or if it shapes employment decisions, Section 87(1) no. 6 BetrVG is commonly engaged and a works council package should be prepared early." } }, { "@type": "Question", "name": "Are AI hiring tools and AI recruiting software legally different?", "acceptedAnswer": { "@type": "Answer", "text": "Usually not in practice. German employers should assess the actual function of the tool, not the marketing label. If the software materially affects candidate selection, the same EU AI Act, GDPR, AGG, and works council questions arise." } } ] } ] ```