Recruitment & AI
EU AI Act: what actually changes for recruiters in 2026
Since August 2024, the EU AI Act has been in force. In 2026, obligations for high-risk systems — including most algorithmic hiring tools — become fully operational. For recruiters, this is not a threat: it is a framework that separates serious solutions from opaque gadgets.
This article explains what actually changes for HR, Talent Acquisition, and agencies in 2026: timeline, obligations, immediate actions, and a roadmap to stay compliant without sacrificing efficiency.

The essentials in 30 seconds
- Systems that filter, rank, or assess candidates are high-risk (Annex III, employment).
- From 2026, providers and deployers must document, supervise, and trace AI-assisted decisions.
- GDPR remains the foundation — the AI Act adds to it, not replaces it.
- A transparent tool with explicit job criteria and human validation meets both frameworks.
AI Act timeline: what applies in 2026
The AI Act rolls out in phases through 2027.
- February 2025: ban on unacceptable-risk AI practices.
- August 2025: duties for general-purpose AI models and governance bodies.
- August 2026: full obligations for high-risk systems — including algorithmic hiring.
- August 2027: extension to certain systems embedded in regulated products.

Which hiring tools are in scope?
Annex III explicitly covers systems used to recruit, filter, or evaluate candidates for employment access. Typically in scope:
- CV or profile scoring engines;
- automated interview analysis tools (text or voice);
- pre-screening systems that rank or reject applicants;
- platforms that prioritise talent pools algorithmically.
Six concrete obligations for recruiters
1. Transparency towards candidates
Inform them that AI is involved, at which stage, and with what impact on the decision.
2. Effective human oversight
A recruiter or hiring manager must be able to validate, override, or contest any AI recommendation.
3. Documentation and traceability
Keep evaluation criteria, model versions, and decision logs. You must explain why a candidate was ranked a certain way.
4. Data quality and representativeness
Training data must be relevant and as representative as possible to limit indirect discrimination.
5. Robustness and cybersecurity
The system must resist errors, model drift, and manipulation attempts.
6. Registration and vendor compliance
High-risk system providers must register in the EU database and supply technical documentation. Verify your vendor is ready for 2026.
HR roadmap for 2026
- Inventory all AI tools used in your hiring funnel.
- Request AI Act compliance documentation from each vendor.
- Update legal notices and the candidate journey (see our GDPR and AI in recruitment guide).
- Formalise human oversight: who validates, within what timeframe, with what traceability.
- Run a bias test on a diverse sample of profiles.
- Train recruiters and hiring managers to read AI outputs as assistance, not verdicts.
AI Act + GDPR: two frameworks, one trust requirement
The AI Act does not replace GDPR. For a broader view on legality in Europe, read Is AI in recruitment legal in Europe?
How HiLucy meets 2026 requirements
HiLucy structures pre-screening on recruiter-defined job criteria, with explainable outputs and final human decisions. Compare with this article's requirements, then explore the HiLucy platform.
Want to move from reading to action? See how Hi Lucy automates your voice AI interviews and your approach to interviews powered by artificial intelligence.