The Legal Landscape
GDPR (in force since 2018) and the EU AI Act (in force since August 2024). Scope, timeline, who carries the risk, and the penalty tiers, up to €35m or 7% of turnover for prohibited practices.
Your team is already inside a legal framework. The EU AI Act names recruitment as high-risk. Parts of it are already in force; the high-risk rules for recruitment now apply from 2 December 2027, after the Digital Omnibus on AI (Regulation (EU) 2026/1744) came into force on 27 July 2026. This is a calm, practical session that tells your TA team what's active now, what's coming, and exactly what to do at the desk.
Tell us what is going on. We reply within two working days to set up a free 30-minute call.
or 7% of global annual turnover, whichever is higher. The top penalty tier, for prohibited AI practices.
We run this training privately for whole talent acquisition teams who want a shared baseline, and as an open-cohort session for individual recruiters and TA leads who want to send one or two people, not the whole department. Either works. Both are live, facilitated, and built for people who open candidate profiles every day.
GDPR (in force since 2018) and the EU AI Act (in force since August 2024). Scope, timeline, who carries the risk, and the penalty tiers, up to €35m or 7% of turnover for prohibited practices.
Lawful bases, data minimisation, special category data, retention periods, and what your privacy notice needs to say.
What's prohibited (emotion recognition, banned Feb 2025), what's high-risk, and what must be in place before deploying any AI screening tool.
Article 14 requires genuine oversight, not rubber-stamping AI recommendations. Automation bias and the CJEU SCHUFA ruling.
Subject Access Requests, the right to an explanation of AI decisions, retention and deletion obligations, and the Dun & Bradstreet ruling (2025).
A daily compliance checklist from job brief to rejection, plus a group case study with multiple compliance failures to debug live.
A working summary of what the training covers. Tick things off as you confirm them with your DPO, ATS vendor, or legal team. Nothing is saved or sent. Your boxes live in your browser session only.
GDPR & EU AI Act for TA teams hiring in the EU and U.K.
The EU AI Act obligations (Art. 26, Art. 12) do not apply to U.K. hires by their own force. If your company is EU-based, both laws apply through your establishment. The GDPR obligations apply regardless via UK GDPR.
Tell us your team size and whether you'd like the whole team in one session or a couple of seats in the next open cohort. We reply within two working days with available dates.
Tell us what is going on. We reply within two working days to set up a free 30-minute call.
Built from official EU legal sources. This does not constitute legal advice. Consult your DPO and legal team before acting on any content.