What Does the AI Act Mean for Employers and HR?

The AI Act is the EU’s common regulatory framework for artificial intelligence. It sets out rules for how AI may be used, with a focus on transparency, risk management, and the protection of fundamental rights.

For employers, the regulation is particularly relevant when AI is used in recruitment, performance management, and other decisions that affect employees.

Table of Contents

1. What is the AI  Act?
2. AI Act Timeline
3. AI in HR - What Is Covered?
4. Sanctions for Non-Compliance
5. How to Prepare
6. Frequently Asked Questions

What is the AI Act?

The EU Artificial Intelligence Act is the first comprehensive law regulating AI. It entered into force on 1 August 2024 and will be introduced gradually. Most rules will apply from 2 August 2026.

The regulation follows a risk-based approach, meaning AI systems are classified based on their level of risk:

• Unacceptable risk
• High risk
• Limited or minimal risk

For employers, it is important to know that AI used in HR is often classified as high-risk, as it can significantly affect individuals rights for example in recruitment, performance evaluation, or other employment related decisions.

When using such systems, employers must ensure:

• Transparency
• Proper documentation
• High data quality
• Compliance with data protection rules

It is also important to ensure human oversight and to prevent discrimination or other negative outcomes.

The AI Act distinguishes between two roles:

• Provider - the organisation that develops and provides an AI system (e.g. a company selling a CV-screening tool).
• Deployer - the organisation using the system (typically the employer).

Employers are usually deployers, not providers.

The requirements are based on how AI is used and the level of risk not on company size.

AI Act Timeline - Key Dates

1 February 2025

The first rules become applicable, including bans on certain AI systems.

From this date:

• Prohibited AI systems must not be used.
• All AI use must comply with basic requirements.

For employers, this means reviewing existing tools especially in HR to ensure they are allowed and compliant.

Some AI uses such as systems that manipulate individuals or make decisions in an unacceptable way are prohibited.

2 August 2025

Rules for general-purpose AI models (GPAI) begin to apply.

• New requirements apply mainly to companies that develop AI models.
• These include governance, documentation, and risk management.
• AI providers must provide information about their models.
• EU Member States must appoint supervisory authorities and introduce sanctions.
• An EU-wide governance structure is established to coordinate implementation.

2 August 2026

Most of the AI Act becomes applicable and enforcement begins.

• Requirements for high-risk AI systems (Annex III) apply - AI used in sensitive areas such as recruitment, education, credit decisions, or essential services must meet strict requirements.
• Transparency requirements (Article 50) apply in certain situations, such as when users interact with AI or AI-generated content.
• Measures to support innovation are introduced.
• Each Member State must provide at least one AI regulatory sandbox.
• Companies can test AI systems in controlled environments.
• Supervision takes place at both national and EU level.

2 August 2027

Rules for high-risk AI embedded in regulated products (such as medical devices or safety critical systems) become fully applicable.

AI in HR - What Is Covered?

The AI Act applies to several HR processes where AI is used to make or support decisions about employees.

These systems are often considered high-risk because they can affect individuals rights and opportunities in the labour market.

Examples of high-risk AI in HR:

• Recruitment tools that automatically screen or rank candidates.
• AI-based analysis of video interviews or personality tests.
• Performance evaluation systems.
• Automated decisions on promotion or termination.
• Monitoring of employee behaviour or productivity.

Sanctions for Non-Compliance

Failure to comply with the AI Act can lead to significant fines:

• Use of prohibited AI systems: up to €35 million or 7% of global annual turnover.
• Violations of high-risk requirements or provider obligations: up to €15 million or 3%.
• Providing incorrect or misleading information: up to €7.5 million or 1%.

The higher amount applies in each case.

For employers using high-risk AI in HR without meeting requirements such as transparency, documentation, and human oversight the risk of sanctions is significant.

How Should Employers Prepare?

The AI Act increases the requirements for how employers use AI in HR processes. Organisations need to work more systematically with governance, control, and documentation.

Many employers already use AI, but often lack clear processes and understanding of risks. It is therefore important to start preparing early before the main rules apply in August 2026.

Recommended actions:

• Map all AI systems used in HR (e.g. recruitment and performance management).
• Identify which systems may be high-risk.
• Ensure proper supplier management (documentation, accountability, compliance).
• Make sure systems meet requirements for transparency, documentation, and data quality.
• Ensure human oversight in decisions affecting employees.
• Ensure compliance with GDPR.
• Develop internal guidelines for AI use in HR.
• Clarify roles and responsibilities.
• Establish processes for incident and risk management.
• Conduct regular risk assessments.
• Document AI use and decisions for traceability.
• Train HR teams and managers on AI and its risks.

Frequently Asked Questions

What is the AI Act?  

The AI Act is EU legislation regulating how AI is developed and used. It applies to organisations operating in the EU, both public and private.

Are there any exemptions? Yes. AI used for private purposes, certain research activities, and military or national security purposes is excluded.

When does it apply? The regulation entered into force in 2024 and is implemented gradually. Key requirements especially for HR apply from 2 August 2026.

Do small businesses need to comply? Yes. The rules apply regardless of company size and depend instead on how AI is used and the level of risk.

What does this mean for HR and recruitment? AI in HR is often classified as high-risk. This means employers must meet stricter requirements regarding transparency, documentation, and human oversight.

Is AI in recruitment allowed?

Yes, but it is typically considered high-risk and must comply with stricter rules to reduce the risk of discrimination and errors.