AI in hiring: your rights as a candidate in Europe

What the EU AI Act and GDPR mean for candidates when employers use AI to screen or assess: timelines, human review, and questions to ask a recruiter. 6 min readUpdated 11 November 2026By the Prepper team

If an employer uses software to screen or assess you, European law gives you more protection than most candidates realise. This is a plain summary, not legal advice.

Data protection law, already in force

Under the GDPR you have the right:

To be told what personal data is collected about you in a hiring process and why.
To access the data an employer holds on you, which can include assessment results and interview notes.
Not to be subject to a decision based solely on automated processing that significantly affects you, with limited exceptions. Where one applies, you can ask for human involvement, give your view and contest the decision.

The EU AI Act

The AI Act classes AI systems used to recruit or select people, such as tools that filter applications or evaluate candidates, as high risk. Employers using them will have duties that include human oversight, following the provider's instructions, monitoring for discriminatory effects, keeping logs and telling people that such a system is used.

Timing. These high-risk obligations were originally due on 2 August 2026. Under changes agreed in 2026 they now apply from 2 December 2027 for stand-alone systems. Some practices have been banned since February 2025, including emotion recognition in the workplace, with narrow exceptions.

Elsewhere

Rules differ outside the EU. New York City, for example, requires bias audits and notice for automated employment decision tools. The United Kingdom relies mainly on data protection and equality law.

Questions you can ask a recruiter

Is any part of this process scored or filtered by software?
Does a person review candidates the system ranks low?
What does the online assessment or video interview measure?
How long is my data kept, and can I have it deleted afterwards?
Can I have an adjustment or an alternative format?

Asking politely does not harm an application, and good employers have ready answers.

If you think a decision was unfair

Ask for feedback and for a human review. You can make a data access request, and you can complain to the data protection authority in your country.

Frequently asked questions

Can a company reject me using only AI?
In the EU and UK, decisions made solely by automated means that significantly affect you are restricted, and you can ask for a person to review the outcome.
When do the EU AI Act rules on hiring apply?
The high-risk obligations covering recruitment systems were postponed from August 2026 and now apply from 2 December 2027. Some prohibited practices have applied since February 2025.
Can I ask whether AI was used on my application?
Yes. You can ask the recruiter directly, and data protection law gives you a right to information about how your data is processed.

Can a company reject me using only AI?

In the EU and UK, decisions made solely by automated means that significantly affect you are restricted, and you can ask for a person to review the outcome.

When do the EU AI Act rules on hiring apply?

The high-risk obligations covering recruitment systems were postponed from August 2026 and now apply from 2 December 2027. Some prohibited practices have applied since February 2025.

Can I ask whether AI was used on my application?

Yes. You can ask the recruiter directly, and data protection law gives you a right to information about how your data is processed.