On 23 September 2026 the AEPD sent a formal warning to a company planning to use an AI tool for analysing CVs and assigning scores. The agency stresses that data protection must be built in from the start, including DPIA for high‑risk processing, transparency to candidates, and effective human oversight. The warning cites GDPR provisions on automated decision‑making and the right to not be subject to solely automated decisions.
Why it matters: The AEPD’s warning highlights GDPR compliance requirements for AI use in recruitment, emphasizing transparency, human control, and risk assessment.
Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.
