Hiring has changed quietly, but materially. Many employers now rely on automated tools to sift, score and filter candidates. The Information Commissioner’s Office (ICO) is now signalling that this is a regulatory priority, and that many organisations are closer to high-risk automated decision-making than they think.

What has changed and what is the risk?

The ICO’s latest work draws on engagement with over thirty employers and focuses on three recurring gaps.

First, organisations often misjudge when a process is truly automated. If human involvement is superficial, the decision is treated as automated, regardless of what the policy says.

Second, transparency is weak. Employers are not clearly telling candidates how they make decisions or what role automation plays.

Third, oversight is inconsistent. Monitoring for bias, documenting decisions and assigning ownership are often underdeveloped.

This is not a technical issue. It is a governance failure.

Many businesses assume the tool is compliant because it is widely used or backed by a supplier. Hiring managers treat outputs as recommendations but act on them as decisions. ‘Human oversight’ becomes a quick sense check, not a genuine intervention.

That combination creates risk on three fronts. Legal risk, where decisions fall into the category of automated decision-making without safeguards. Financial and regulatory risk, where enforcement is now clearly in scope. Cultural risk, where patterns of bias scale quickly and quietly.

Most businesses would struggle to explain, in simple terms, how their hiring tools reach outcomes. That is the test that now matters.

What should you do?

• Map where automation is used throughout the recruitment lifecycle.
• Test whether human involvement is real, not theoretical.
• Demand clear explanations from suppliers, not marketing summaries.
• Audit outcomes for patterns that indicate bias or drift.
• Assign clear internal ownership for systems and decisions.
• Update candidate communications so they reflect actual practice.

Automation in hiring is not the problem. Unseen automation is.

Source: https://ico.org.uk/about-the-ico/what-we-do/recruitment-rewired/