Spanish data authority warns company over planned AI tool for screening CVs and scoring candidates
AI-generated. This page was written and translated automatically by AI and checked by software against the cited sources. No human editor reviewed it. Not legal advice.
Summary
On September 23, 2026, the Spanish Data Protection Agency (AEPD) sent a warning to a company considering an AI tool to screen and evaluate candidates in recruitment and internal mobility processes. The tool would analyse CVs, assign scores and possibly prioritise candidates. According to the document, it would not yet have been put into operation, although the company had told staff about its upcoming rollout. The AEPD says the company must adopt appropriate technical and organisational measures, assess risks and, if the processing could entail high risk, carry out a data protection impact assessment beforehand. It also stresses transparency toward candidates and workers, and that human review must be effective rather than automatic acceptance of the tool's result.
Why it matters
The warning shows how the AEPD applies GDPR safeguards, including data protection by design, impact assessments, transparency and meaningful human intervention, to AI hiring tools. It is a preventive measure under artículo 58.2.a) and does not declare that the company committed an infringement.
- Parties involved
- Spanish Data Protection Agency
- Primary source
- AEPD (aepd.es)
Source retrieved: . Sources are often in other languages; links open the original. - Topics
- Employment & hiring · Privacy & automated decisions