EU AI Act for HR: High-Risk Employment AI and Deadlines

The EU AI Act treats most AI used to hire, promote, fire, allocate work or monitor employees as high-risk. Employers using it are deployers with duties on oversight, logs and worker notice. After the 2026 Digital Omnibus, those high-risk duties apply from December 2, 2027, while the ban on workplace emotion recognition has applied since February 2, 2025.

Key takeaways

  • Annex III point 4 lists recruitment and selection tools, and tools that make or influence decisions on promotion, termination, task allocation and performance monitoring.
  • Regulation (EU) 2026/1744, in force since July 27, 2026, moved Annex III high-risk obligations from August 2, 2026 to December 2, 2027.
  • Prohibitions, including AI that infers emotions in the workplace, have applied since February 2, 2025.
  • US employers are in scope through EU establishments, and as third-country deployers when AI output is used in the EU.

Which HR uses of AI are high-risk under Annex III?

Annex III point 4 covers "employment, workers management and access to self-employment" in two groups:

  • 4(a): AI systems intended for the recruitment or selection of people, "in particular to place targeted job advertisements, to analyse and filter job applications, and to evaluate candidates."
  • 4(b): AI systems intended to make decisions affecting terms of work-related relationships, promotion or termination, "to allocate tasks based on individual behaviour or personal traits or characteristics," or to monitor and evaluate the performance and behaviour of people in those relationships.

Article 6(3) offers a narrow exit: an Annex III system is not high-risk if it does not materially influence decision outcomes, for example because it performs a narrow procedural task or a preparatory task. That exit never applies when the system profiles people. Most screening, ranking, scheduling-by-behavior and performance analytics tools involve profiling, so assume high-risk unless your provider documents otherwise.

HR use caseLikely classificationWhy
Resume screening or candidate rankingHigh-riskAnnex III 4(a), analysing and filtering applications
Targeted job ad deliveryHigh-riskNamed expressly in 4(a)
Shift or task allocation based on individual behaviourHigh-risk4(b) task allocation
Productivity or performance scoringHigh-risk4(b) monitoring and evaluating performance
Emotion inference from video interviews or call audio of staffProhibitedArticle 5(1)(f), unless for medical or safety reasons
Drafting a job description or policy FAQUsually not high-riskNo decision about a person; transparency rules may still apply

What does the EU AI Act prohibit in the workplace?

Article 5(1)(f) prohibits placing on the market, putting into service or using AI systems "to infer emotions of a natural person in the areas of workplace and education institutions," except where the system is intended for medical or safety reasons. This has applied since February 2, 2025. In HR terms, that rules out tools claiming to read enthusiasm, honesty or stress from interview video, voice or typing patterns of candidates and employees in the EU. Review any vendor feature described as sentiment, engagement or emotion analytics applied to individuals.

Prohibitions carry the highest fines: under Article 99, up to EUR 35 million or 7 percent of worldwide annual turnover, whichever is higher. Breaches of deployer duties under Article 26 can reach EUR 15 million or 3 percent. For SMEs the lower of the two figures applies.

What are the EU AI Act deadlines for HR after the 2026 delay?

The Digital Omnibus on AI, Regulation (EU) 2026/1744, was published in the Official Journal on July 24, 2026 and entered into force on July 27, 2026. The amended Article 113 now reads as follows for HR teams:

ObligationApplies from
Prohibited practices (Article 5), including workplace emotion recognitionFebruary 2, 2025
AI literacy (Article 4), amended wordingFebruary 2, 2025
General application, including Article 50 transparency dutiesAugust 2, 2026
New prohibitions on non-consensual intimate imagery and child sexual abuse materialDecember 2, 2026
High-risk rules for Annex III systems, including employment (Chapter III Sections 1 to 3)December 2, 2027
High-risk rules for Annex I product-safety systemsAugust 2, 2028

Do not read the delay as a reason to pause. Vendors need lead time to supply instructions for use and documentation, and your oversight design, training and notices take months to build. The amended Article 4 also changed AI literacy from ensuring "a sufficient level" to taking measures to support it. US employers should also remember that several state AI employment laws are already in force or start in January 2027, well before the EU high-risk date.

What must employers do as deployers of high-risk HR AI?

Article 26 sets the deployer duties that will apply to employment AI from December 2, 2027:

  1. Use as instructed: take technical and organisational measures to use the system according to the provider's instructions for use.
  2. Human oversight: assign oversight to people with "the necessary competence, training and authority," and support them.
  3. Input data: where you control input data, ensure it is relevant and sufficiently representative for the intended purpose.
  4. Monitoring and incidents: monitor operation, suspend use and notify the provider and authority if you believe the system presents a risk, and report serious incidents.
  5. Logs: keep automatically generated logs under your control for at least six months, unless other law requires otherwise.
  6. Worker information: before putting a high-risk system into service at the workplace, inform workers' representatives and affected workers.
  7. Notice to individuals: tell people that they are subject to a high-risk Annex III system used to make or assist decisions about them.

Article 86 adds a right for affected people to obtain clear and meaningful explanations of the AI system's role in a decision that adversely affects them. If you process personal data, the GDPR applies alongside all of this; see our guide on GDPR and HRMS employee data privacy.

Does the EU AI Act apply to US employers with EU staff?

Often, yes. Article 2(1)(b) covers deployers established or located in the EU, so an EU subsidiary that uses a hiring tool is a deployer. Article 2(1)(c) covers deployers in a third country "where the output produced by the AI system is used in the Union," which can reach a US parent that runs a global talent tool whose scores drive decisions about EU candidates or employees. Practical steps for US multinationals:

  • Map which HR tools touch EU candidates or employees, including global ATS, performance and scheduling modules.
  • Decide which legal entity is the deployer for each tool and who owns compliance.
  • Ask vendors whether they are providers of a high-risk system under Annex III, their plan for conformity by December 2, 2027, and what instructions for use and log access they will supply. Our AI vendor due diligence questionnaire provides a full question set.
  • Check works council or employee representative consultation rules in each country before rollout.
  • Note that modifying a system substantially or putting your own name on it can turn you into a provider, with heavier duties.

Frequently Asked Questions

When do EU AI Act high-risk rules apply to HR tools?

After Regulation (EU) 2026/1744, Chapter III Sections 1 to 3 apply to Annex III high-risk systems, which include employment and worker management, from December 2, 2027. The original date was August 2, 2026. Prohibitions and AI literacy have applied since February 2, 2025, so some duties are already live.

Is AI-based video interview analysis banned in the EU?

Analysing interviews to infer a candidate's emotions is prohibited under Article 5(1)(f) unless the purpose is medical or safety related. Other analysis of interview content, such as transcribing answers or matching them to job criteria, is not banned but is likely high-risk under Annex III point 4(a) because it evaluates candidates.

Are AI chatbots that answer HR policy questions high-risk?

Generally not, if they only answer questions and do not make or materially influence decisions about individuals. They can still be subject to transparency duties under Article 50, which applies from August 2, 2026, so users should know they are interacting with an AI system unless that is obvious from context.

Can US employers ignore the EU AI Act if their vendor is compliant?

No. Provider compliance does not cover deployer duties. Employers using a high-risk HR system must still assign trained human oversight, follow instructions for use, keep logs, monitor operation, inform workers' representatives and affected workers, and give notice to individuals subject to the system.

Next steps for HR and legal teams

  1. Inventory HR AI tools and classify each as prohibited, high-risk, transparency-only or minimal.
  2. Remove or disable any emotion inference features used on EU staff or candidates now.
  3. Collect provider documentation and agree on log access and incident notification terms in contracts.
  4. Design oversight roles, worker information and individual notices, targeting readiness well before December 2, 2027.
  5. Track Commission guidelines and national authority announcements. More resources are in our AI in HR guides.

This article is general information, not legal advice.

Last reviewed: October 2026.

Sources

Comments

Post a Comment

Popular Posts

Why Workday Onboarding Breaks Down for Frontline Employees

Image
The Onboarding Gap Nobody Talks About Workday's onboarding module is well-designed for its intended audience: office-based, desk workers with reliable computer access, personal email addresses, and the digital literacy to navigate a web-based portal. For this population, Workday onboarding works well, it automates tasks, routes approvals, collects documents, and creates a reasonably smooth first-week experience. But most organizations using Workday have a substantial population of frontline workers: warehouse employees, retail staff, manufacturing workers, healthcare aides, food service workers, drivers. For this population, the standard Workday onboarding experience frequently fails in ways that are predictable, documented, and, crucially, fixable. Understanding why it breaks down and what actually works is increasingly urgent as labor market competition for frontline talent intensifies. How Standard Workday Onboarding Is Designed Workday's new hire onboarding (delivered throu...
Read more

How to Improve the Customer Experience (CX)

Customer experience is the sum of every interaction a customer has with your company, from the first ad they see to the way a return gets handled years after the purchase. Companies that take this seriously outperform those that treat CX as a support function. The ones that struggle tend to confuse customer satisfaction scores with actual improvements, or fix the wrong things. Here's a practical look at what actually moves CX forward. Start with where customers actually struggle Most CX improvement programs begin with surveys. Surveys are useful but limited, they capture what customers are willing to articulate after the fact, which tends to under-report friction in the middle of an experience and over-index on the most recent interaction. The richer data comes from observing behavior directly: where do customers drop off in a purchase flow? Where do support tickets spike? What search queries are people entering on your site that suggest they can't find what they're loo...
Read more

How Do I Log In and Sign In to Workday HCM

Workday HCM is the system your organization uses to manage everything from your pay stubs and benefits to time off requests and performance reviews. Getting in is usually simple once you know where to go, but first-time login, password resets, and single sign-on setups can trip people up if no one has walked them through it. Here's what you need to know. How to find your Workday login URL Workday doesn't have one universal login page. Each organization has its own tenant, a dedicated instance with a unique URL. Your company's HR department or IT team should have provided the URL when you were onboarded. It usually looks something like your-company.workday.com or wd3.myworkday.com/yourcompany . If you weren't given the URL, check your onboarding email, your company's intranet, or ask HR directly. Some organizations also link to Workday from their internal HR portal. Don't try to guess the URL, there's no central directory, and guessing wrong just takes...
Read more

UKG Union Contract and Overtime Rules for Multi-Site Food Plants

Multi-site food manufacturers running UKG often struggle with one thing: each plant has its own union contract, shift pattern and overtime rules, while the timekeeping system is configured centrally. The fix: document every contract rule precisely, map it to UKG pay rules and work rules, test against real timecards, and handle true exceptions with add-ons rather than core customization. Disclosure: The author works at CloudApper, which makes the UKG add-ons discussed in this article. Why are union contracts so hard to configure in UKG? Federal law sets a floor. Under the Fair Labor Standards Act, non-exempt employees must receive at least one and a half times their regular rate for hours worked over 40 in a workweek. Collective bargaining agreements frequently go further, and food plants often have several agreements across locations. Common contract provisions include: Daily overtime after 8 hours, or after 10 on a four-day schedule. Double time on the seventh consecutive day o...
Read more

Infor HCM Software Engineer Jobs: Salary Factors and Skills

An Infor HCM software engineer's salary depends mostly on the type of employer, the depth of Infor platform knowledge, and location. Engineers who combine general software skills with hands-on experience in Infor CloudSuite HCM, Lawson, Infor ION integrations and payroll logic tend to command more than generalist developers, because that combination is scarce in the job market. What does an Infor HCM software engineer actually do? The title covers several different jobs, and pay follows the job more than the title. Broadly, these engineers build, configure, integrate and support the Infor human capital management stack, which includes core HR, payroll, benefits, talent management and workforce management. Many organizations still run the older on-premises Infor Lawson system alongside or instead of the cloud suite, so experience with both is common. Typical responsibilities include: Building and maintaining integrations between Infor HCM and payroll providers, benefits carrie...
Read more

How to Search in Workday: Find Reqs, Reports, People and Tasks

To search in Workday, type into the global search bar at the top of any page, press Enter, then use the category filters on the left of the results to narrow to people, organizations, tasks and reports or other object types. Workday only returns items your security roles allow you to see, so missing results often mean an access issue rather than a typo. How does Workday search work? Workday uses a single global search box rather than separate menus for each module. Everything in the tenant, from a worker's profile to a job requisition to a custom report, is an object that search can find if you have permission to view it. Three points explain most search behavior: Security trimming. Results are filtered by your security groups. A recruiter and a payroll partner typing the same term will see different results. Categories. After you press Enter, results are grouped into categories that appear as filters. Clicking one hides everything else. Related actions. Once you open an...
Read more

ERP Solution Guide: How to Choose the Best ERP for You

What Is an ERP System and Why Does It Matter? An enterprise resource planning (ERP) system is software that integrates the core functions of a business — finance, inventory, procurement, human resources, manufacturing, and customer management — into a single, connected platform. Instead of data living in separate spreadsheets or standalone applications that don't talk to each other, an ERP creates one source of truth for the entire organization. For growing companies, the question is usually not whether they need an ERP but when and which one. Getting this decision right has long-term consequences. A poorly chosen ERP creates more problems than it solves — forcing teams to work around the system, creating data integrity issues, and consuming IT resources in an endless cycle of customization and maintenance. A well-chosen ERP, on the other hand, becomes the operational backbone that lets a company scale without proportionally growing its administrative overhead. Understandin...
Read more

New Apple Watch Health Features Will Be Available This Year, but Blood Pressure and Blood Sugar Sensors Will Not Be Available Until Next Year

Image
What Apple confirmed for its upcoming watch lineup Apple's annual health feature announcements for its Watch lineup continue to generate significant attention, both from health enthusiasts who track every new sensor addition and from the clinical research community that increasingly uses consumer wearables in studies. The pattern that has emerged over the past several product cycles is consistent: Apple confirms a set of features that will ship with the current year's model and acknowledges separately that other, more complex sensors are still in development and will not arrive on schedule. This year's announcement followed that pattern closely. Several new health monitoring capabilities are confirmed for the current Apple Watch generation, representing meaningful additions to what the device can track passively. At the same time, the two most anticipated sensor additions, continuous blood pressure monitoring and non-invasive blood glucose measurement, will not be availa...
Read more

The Future of Employee Healthcare Key Concerns and Strategies for 2024

In a rapidly evolving professional landscape, employers are grappling with an array of challenges as they plan employee-sponsored healthcare strategies for 2024. A recent survey conducted in the US in August 2023 sheds light on the primary concerns and emerging trends in the realm of employee healthcare. Mental health, healthcare costs, pharmacy expenditures, and transformative technologies are at the forefront of employer considerations, signaling a need for comprehensive and innovative approaches to employee well-being. Rising Mental Health Concerns A staggering seven in 10 employers reported a surge in mental health concerns, marking a significant uptick from the previous year. With 77% of employers experiencing an increase and an additional 16% anticipating future challenges, the mental health landscape is a top priority. The implications of the ongoing pandemic, remote work dynamics, and societal shifts are evident as employers grapple with addressing and supporting the mental ...
Read more

The End of Remote Work: Why Companies Want You Back

Return to Office: The Trend Reshaping the Modern Workplace After years of celebrating the remote work revolution, a powerful counter-movement has taken hold. Amazon, JPMorgan Chase, Goldman Sachs, Disney, and hundreds of other organizations have issued return-to-office (RTO) mandates, some requiring full five-day-a-week presence. The era of near-universal remote work flexibility appears to be giving way to something more complicated, and HR leaders are at the center of navigating it. Why Companies Are Calling Employees Back Collaboration and Innovation: Many executives argue that the serendipitous interactions, the hallway conversation, the spontaneous whiteboard session, that drive breakthrough ideas simply cannot be replicated on Zoom. Studies from Stanford and MIT suggest that in-person collaboration produces measurably higher rates of novel idea generation. Culture and Cohesion: Building and sustaining organizational culture at a distance has proven harder than anticipated. N...
Read more