{"id":6313,"date":"2026-07-16T12:04:14","date_gmt":"2026-07-16T12:04:14","guid":{"rendered":"https:\/\/ceo.com.pl\/en\/?p=6313"},"modified":"2026-07-16T12:04:14","modified_gmt":"2026-07-16T12:04:14","slug":"polands-data-protection-authority-calls-for-stronger-rules-on-ai-in-recruitment-60749","status":"publish","type":"post","link":"https:\/\/ceo.com.pl\/en\/polands-data-protection-authority-calls-for-stronger-rules-on-ai-in-recruitment-60749\/","title":{"rendered":"Poland\u2019s Data Protection Authority Calls for Stronger Rules on AI in Recruitment"},"content":{"rendered":"<p>Artificial intelligence systems used in recruitment may reproduce existing biases, analyse an excessively broad range of information about applicants and contribute to discriminatory decisions. Miros\u0142aw Wr\u00f3blewski, President of Poland\u2019s Personal Data Protection Office, known as UODO, has asked the Ministry of Family, Labour and Social Policy to begin work on legislation providing additional protection for job applicants and employees.<\/p>\n<p>UODO is receiving a growing number of reports about the use of artificial intelligence tools in recruitment processes. Such systems may be used to analyse application documents, shortlist candidates, create applicant profiles and support decisions on whether someone should be invited to an interview or offered a job.<\/p>\n<p>According to the President of UODO, the development of these technologies requires additional legal safeguards. AI tools make it possible to process personal data on a large scale and may sometimes use information belonging to special categories of personal data, commonly referred to as sensitive data.<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_85 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/ceo.com.pl\/en\/polands-data-protection-authority-calls-for-stronger-rules-on-ai-in-recruitment-60749\/#Algorithms_may_reproduce_existing_biases\" >Algorithms may reproduce existing biases<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/ceo.com.pl\/en\/polands-data-protection-authority-calls-for-stronger-rules-on-ai-in-recruitment-60749\/#Artificial_intelligence_may_analyse_too_much_data\" >Artificial intelligence may analyse too much data<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/ceo.com.pl\/en\/polands-data-protection-authority-calls-for-stronger-rules-on-ai-in-recruitment-60749\/#Applicants_should_know_why_they_were_rejected\" >Applicants should know why they were rejected<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/ceo.com.pl\/en\/polands-data-protection-authority-calls-for-stronger-rules-on-ai-in-recruitment-60749\/#Recruitment_AI_systems_are_classified_as_high_risk\" >Recruitment AI systems are classified as high risk<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/ceo.com.pl\/en\/polands-data-protection-authority-calls-for-stronger-rules-on-ai-in-recruitment-60749\/#Assessments_of_the_impact_on_privacy_and_fundamental_rights_are_necessary\" >Assessments of the impact on privacy and fundamental rights are necessary<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/ceo.com.pl\/en\/polands-data-protection-authority-calls-for-stronger-rules-on-ai-in-recruitment-60749\/#Humans_should_retain_oversight_of_algorithmic_decisions\" >Humans should retain oversight of algorithmic decisions<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/ceo.com.pl\/en\/polands-data-protection-authority-calls-for-stronger-rules-on-ai-in-recruitment-60749\/#UODO_offers_support_in_drafting_new_legislation\" >UODO offers support in drafting new legislation<\/a><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"Algorithms_may_reproduce_existing_biases\"><\/span>Algorithms may reproduce existing biases<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>One of the most serious risks associated with the use of artificial intelligence in employment is its potential to perpetuate unequal treatment. AI models are trained on large datasets that may reflect historical biases and inequalities in the labour market.<\/p>\n<p>For example, if historical data show that members of a particular group were more frequently recruited for certain positions, an AI system may interpret this relationship as a pattern that should be repeated. As a result, applicants may be assessed not only on the basis of their qualifications, but also according to indirect characteristics associated with their gender, age, ethnic background, disability or other legally protected attributes.<\/p>\n<p>Poland\u2019s Labour Code requires equal treatment of employees regardless of factors including gender, age, disability, race, religion, nationality, political views, trade union membership, ethnic origin, religious denomination and sexual orientation.<\/p>\n<p>The President of UODO warns, however, that existing regulations may be insufficient in view of the technical capabilities of modern artificial intelligence systems.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Artificial_intelligence_may_analyse_too_much_data\"><\/span>Artificial intelligence may analyse too much data<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Another concern is the scope of information used by algorithms. Under Article 22\u00b9 of the Polish Labour Code, an employer may request only specified information from a job applicant, including their name, date of birth, contact details, education, professional qualifications and employment history, where such information is necessary for the role concerned.<\/p>\n<p>AI tools may nevertheless draw conclusions from information that an employer should not consider during recruitment. This could include data obtained from social media, a candidate\u2019s manner of speaking, behaviour during an online interview, facial expressions, tone of voice, place of residence or other apparently neutral information that may indirectly reveal protected personal characteristics.<\/p>\n<p>In practice, a system could therefore make or recommend a decision on the basis of data extending beyond the statutory list of information that an employer is entitled to request from a job applicant.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Applicants_should_know_why_they_were_rejected\"><\/span>Applicants should know why they were rejected<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The President of UODO has also highlighted the right established under the General Data Protection Regulation not to be subject to a decision based solely on automated processing where that decision produces legal effects or similarly significantly affects an individual.<\/p>\n<p>The rejection of an application by a recruitment system may have a substantial impact on a person\u2019s professional and financial circumstances. Any national legislation permitting algorithms to make such decisions should therefore include appropriate safeguards.<\/p>\n<p>A person assessed by an AI system should be able to understand how the tool operates, challenge its decision and obtain meaningful human intervention. It is also necessary to determine who is responsible for processing the data and making the final decision: the employer, the system provider or another entity involved in the recruitment process.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Recruitment_AI_systems_are_classified_as_high_risk\"><\/span>Recruitment AI systems are classified as high risk<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The European Union\u2019s Artificial Intelligence Act classifies systems used in employment, worker management and access to self-employment as high-risk AI systems.<\/p>\n<p>This applies in particular to tools used to recruit or select candidates, publish targeted job advertisements, analyse and filter applications, and evaluate applicants during interviews. It also covers systems used to make decisions affecting employment conditions, promotions, termination of employment, task allocation, and the monitoring and evaluation of workers.<\/p>\n<p>Under Article 86 of the AI Act, a person affected by a decision made on the basis of output from a high-risk AI system may request a clear and meaningful explanation of the role played by artificial intelligence in the decision-making process and of the main elements of the decision.<\/p>\n<p>This is particularly important where a decision produces legal effects or similarly has a significant impact on an individual\u2019s fundamental rights.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Assessments_of_the_impact_on_privacy_and_fundamental_rights_are_necessary\"><\/span>Assessments of the impact on privacy and fundamental rights are necessary<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>According to the President of UODO, any legislation permitting the use of AI systems in employment should be preceded by a data protection impact assessment.<\/p>\n<p>Such an assessment would help determine what information will be processed, the purposes for which it will be used, how long it will be retained and what risks the use of algorithms may create for applicants and employees.<\/p>\n<p>A data protection impact assessment should also help employers and technology providers demonstrate that their processing activities comply with the GDPR. It should establish whether the proposed arrangements contain adequate safeguards for the rights and freedoms of the people whose data are being analysed.<\/p>\n<p>Separately, Article 27 of the AI Act requires an assessment of the impact of certain high-risk systems on fundamental rights, including the right to privacy. The President of UODO emphasises that the assessment required under artificial intelligence legislation should complement, rather than replace, the data protection impact assessment required under the GDPR.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Humans_should_retain_oversight_of_algorithmic_decisions\"><\/span>Humans should retain oversight of algorithmic decisions<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>High-risk AI systems must comply with requirements concerning risk management, the quality of the data used, technical documentation, record-keeping, transparency, human oversight, accuracy and cybersecurity.<\/p>\n<p>People affected by such systems should be aware that artificial intelligence is being used. Legislation should also clearly define the purposes for which AI tools may be deployed and identify the entity responsible for processing personal data.<\/p>\n<p>Meaningful human oversight should remain a central safeguard. A person responsible for recruitment cannot simply approve an algorithm\u2019s recommendation automatically. They must have the necessary knowledge, authority and competence to assess the output, modify it or reject it altogether.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"UODO_offers_support_in_drafting_new_legislation\"><\/span>UODO offers support in drafting new legislation<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Miros\u0142aw Wr\u00f3blewski has formally asked the Ministry of Family, Labour and Social Policy to begin legislative work aimed at providing applicants and employees with effective protection against discrimination resulting from the use of artificial intelligence.<\/p>\n<p>The President of UODO has also offered the authority\u2019s expert support in reviewing proposed measures for compliance with the GDPR.<\/p>\n<p>The objective of any new regulations would be to reconcile employers\u2019 ability to use modern technologies with the protection of privacy, the principle of equal treatment and the right of applicants to understand the genuine reasons behind decisions made during recruitment processes.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Artificial intelligence systems used in recruitment may reproduce existing biases, analyse an excessively broad range of information about applicants and contribute to discriminatory decisions. Miros\u0142aw Wr\u00f3blewski, President of Poland\u2019s Personal Data Protection Office, known as UODO, has asked the Ministry of Family, Labour and Social Policy to begin work on legislation providing additional protection for [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":4089,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[10],"tags":[3806,2974,2789,3174,2679,2683,4692],"class_list":["post-6313","post","type-post","status-publish","format-standard","has-post-thumbnail","category-law","tag-ai-act","tag-artificial-intelligence","tag-beyond","tag-gdpr","tag-media","tag-social-media","tag-uodo"],"jetpack_publicize_connections":[],"_links":{"self":[{"href":"https:\/\/ceo.com.pl\/en\/wp-json\/wp\/v2\/posts\/6313","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ceo.com.pl\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ceo.com.pl\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ceo.com.pl\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ceo.com.pl\/en\/wp-json\/wp\/v2\/comments?post=6313"}],"version-history":[{"count":2,"href":"https:\/\/ceo.com.pl\/en\/wp-json\/wp\/v2\/posts\/6313\/revisions"}],"predecessor-version":[{"id":6315,"href":"https:\/\/ceo.com.pl\/en\/wp-json\/wp\/v2\/posts\/6313\/revisions\/6315"}],"wp:attachment":[{"href":"https:\/\/ceo.com.pl\/en\/wp-json\/wp\/v2\/media?parent=6313"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ceo.com.pl\/en\/wp-json\/wp\/v2\/categories?post=6313"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ceo.com.pl\/en\/wp-json\/wp\/v2\/tags?post=6313"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}