HIGHLIGHTS

Implementation of the EU Artificial Intelligence Act Strengthens Regulation of AI in the Workplace, Human Resources

1. Background

The European Union Artificial Intelligence Act (EU AI Act) represents a major development in the regulation of artificial intelligence in the workplace, particularly in the field of Human Resources (HR).

The EU AI Act adopts a risk-based approach to regulating artificial intelligence. Rather than imposing a complete ban on AI technologies, the Regulation classifies AI systems according to the level of risk they pose to individuals, fundamental rights, health, and safety.

Under the Regulation, certain AI systems used in the field of employment and human resources are classified as high-risk AI systems. These may include systems used for:

• Recruitment and selection;
• Automated CV screening;
• Employee evaluation and performance assessment;
• Promotion and termination decisions;
• Allocation of tasks;
• Monitoring of employees; and
• Workforce management.

The increasing use of AI in HR has raised concerns regarding algorithmic bias, discrimination, lack of transparency, privacy, and accountability. The EU AI Act seeks to address these concerns while allowing businesses to continue benefiting from AI-based technologies.

2. Current Development

The implementation of the EU AI Act has introduced significant compliance obligations for organisations using high-risk AI systems in employment and HR-related activities.

Employers and other relevant users of such systems are required to ensure appropriate human oversight of AI systems. Important employment decisions should not be left entirely to automated processes where the AI system falls within the high-risk framework.

The Regulation also establishes requirements concerning:

• Risk management;
• Data governance and data quality;
• Technical documentation;
• Record-keeping;
• Transparency;
• Human oversight;
• Accuracy and reliability; and
• Cybersecurity.

Organisations using high-risk AI systems must ensure that the data used to develop and operate such systems is of sufficient quality to reduce the possibility of discriminatory or inaccurate outcomes.

Non-compliance with the EU AI Act may result in significant administrative fines, depending on the nature and seriousness of the violation.

3. Legal Analysis

A. Risk-Based Approach

The central feature of the EU AI Act is its risk-based regulatory framework.

AI applications are broadly categorized according to the level of risk they pose. Certain practices involving unacceptable risks are prohibited, while high-risk systems are permitted subject to extensive regulatory requirements.

Employment-related AI systems fall within the high-risk category because they can significantly affect an individual's livelihood, career progression, income, and working conditions.

B. High-Risk AI in Employment

AI systems used for recruitment, employee selection, performance evaluation, promotion, termination, task allocation, and monitoring may significantly affect an individual's employment opportunities and professional life.

Consequently, providers and users of such systems are required to comply with enhanced safeguards.

These safeguards are intended to ensure that AI-assisted employment decisions are:

• Reliable;
• Transparent;
• Traceable;
• Non-discriminatory; and
• Subject to meaningful human oversight.

C. Human Oversight

One of the most important safeguards under the EU AI Act is human oversight.

The objective is to prevent employers from relying entirely on automated decisions where those decisions could significantly affect employees.

Human oversight allows decision-makers to identify potentially incorrect, discriminatory, or unreasonable AI-generated outcomes and intervene where necessary.

D. Equality and Non-Discrimination

AI systems used in employment may reproduce or amplify discriminatory patterns present in historical data.

For example, an AI recruitment system trained on biased historical hiring data could systematically disadvantage particular groups of applicants.

The EU AI Act therefore emphasizes data quality, risk management, and monitoring to reduce such risks.

The framework is also consistent with fundamental rights protected by the Charter of Fundamental Rights of the European Union, particularly rights concerning:

• Equality;
• Non-discrimination;
• Respect for private and family life; and
• Protection of personal data.

E. Relationship with the GDPR

The EU AI Act operates alongside the General Data Protection Regulation (GDPR).

The GDPR remains relevant where AI systems process personal data. Employers must therefore consider both frameworks when deploying AI-based HR technologies.

The two legal frameworks collectively address issues such as:

• Lawful processing of employee data;
• Data minimisation;
• Transparency;
• Data protection;
• Automated decision-making;
• Security; and
• Individual rights.

Consequently, compliance with the EU AI Act does not eliminate an organisation's obligations under the GDPR.

4. Why the Development Matters

The implementation of the EU AI Act is significant for several reasons.

1. Protection Against Algorithmic Discrimination

The Regulation provides stronger safeguards against discriminatory outcomes caused by biased AI systems in recruitment, promotion, evaluation, and other HR functions.

2. Greater Transparency

The framework requires greater transparency regarding the operation and use of high-risk AI systems, helping employees and organisations understand how AI may influence important workplace decisions.

3. Human Control Over Important Decisions

The requirement for human oversight seeks to prevent significant employment decisions from being made solely through automated systems.

4. Corporate Accountability

Employers and AI providers must establish appropriate systems for risk management, documentation, monitoring, and compliance.

5. Responsible Use of Workplace AI

The Regulation encourages businesses to adopt AI in a manner that respects fundamental rights, fairness, transparency, and accountability.

6. Global Influence

The EU AI Act may have consequences beyond Europe. Multinational companies operating across different jurisdictions may adopt EU-level AI governance standards globally in order to maintain consistent compliance practices.

5. Impact on Employers and HR Departments

The implementation of the EU AI Act requires employers to reconsider how AI is integrated into HR operations.

Organisations using high-risk AI systems should consider:

• Conducting AI risk assessments;
• Reviewing existing HR AI systems;
• Maintaining appropriate technical documentation;
• Ensuring human oversight;
• Auditing datasets for potential bias;
• Establishing internal AI governance policies;
• Training HR professionals and employees;
• Maintaining records of AI-related decisions; and
• Ensuring compliance with both the AI Act and GDPR.

Companies may also need to review contracts with third-party AI providers to determine whether appropriate responsibilities for compliance, monitoring, and risk management have been allocated.

6. International Legal Significance

The EU AI Act represents one of the most comprehensive attempts to regulate artificial intelligence through a rights-based and risk-based legal framework.

Its approach may influence other jurisdictions that are developing their own AI legislation, particularly in areas involving:

• Employment;
• Data protection;
• Algorithmic discrimination;
• Automated decision-making;
• Workplace surveillance; and
• Corporate accountability.

The regulation demonstrates an emerging principle that technological innovation should be accompanied by appropriate safeguards for human dignity and fundamental rights.

7. Conclusion

The implementation of the EU Artificial Intelligence Act represents a significant milestone in regulating AI within workplace and human-resource practices.

By classifying certain employment-related AI systems as high-risk, the Regulation introduces stronger obligations concerning risk management, data quality, transparency, technical documentation, and human oversight.

The framework seeks to prevent algorithmic discrimination and protect employees while allowing businesses to continue using AI for legitimate HR purposes.

Together with the GDPR and the Charter of Fundamental Rights of the European Union, the AI Act establishes a comprehensive legal framework for responsible use of artificial intelligence in employment.

The European approach may serve as an important model for future AI regulation worldwide, particularly as governments seek to balance technological innovation with privacy, equality, non-discrimination, and fundamental rights.

8. References

1. Regulation (EU) 2024/1689 – Artificial Intelligence Act.
2. European Commission – Artificial Intelligence Act and implementation guidance.
3. Charter of Fundamental Rights of the European Union.
4. General Data Protection Regulation (GDPR) – Regulation (EU) 2016/679.
5. EUR-Lex – Official EU legislation and regulatory materials.
6. European Parliament – Publications concerning AI regulation and employment.
7. European Commission – AI regulatory framework and policy documents.
8. Reuters – Reports on the implementation of the EU AI Act.
9. Bloomberg Law – Analysis of AI regulation and workplace compliance.
10. International Association of Privacy Professionals (IAPP) – Analysis of AI governance, privacy, and compliance.