HR AI Compliance

AI used in employment contexts is subject to a unique concentration of regulatory attention. The EU AI Act lists employment AI in Annex III as high-risk by default. GDPR Article 22 creates parallel obligations for automated decision-making. NYC Local Law 144 adds local bias-audit requirements. Lexara Advisory helps HR and legal teams understand which obligations apply and how to build evidence.

EU AI Act Annex III employment classification: AI systems used for recruitment, candidate screening, promotion decisions, termination assistance, and performance monitoring are classified as high-risk under Annex III when they affect EU-based individuals. This applies regardless of where the employer is headquartered. Classification must be documented, defensible, and communicated to the workforce where transparency obligations apply. Lexara conducts systematic Annex III classification for HR AI portfolios.

GDPR Article 22 in HR contexts: GDPR Article 22 grants individuals the right not to be subject to solely automated decisions with legal or significant effects. In hiring and promotion, this creates obligations for human review, meaningful information about the logic involved, and the right to contest decisions. Lexara maps where Article 22 intersects with EU AI Act obligations to avoid duplicative or conflicting compliance efforts.

NYC Local Law 144 for employment AI: NYC Local Law 144 requires employers using automated employment decision tools (AEDTs) to conduct annual bias audits, publish summary results, and notify candidates before automated screening. Lexara advises on LL144 readiness as part of a broader HR AI governance framework, not as a standalone exercise. The bias audit results and notice procedures should be integrated into overall AI risk documentation.

AI literacy for HR teams (Article 4): Article 4 of the EU AI Act requires providers and deployers to ensure sufficient AI literacy among staff operating or overseeing AI systems. For HR teams, this means understanding how screening tools operate, their limitations, and the legal obligations that apply to their use. Lexara designs role-based literacy programs with completion records that satisfy evidence requirements.

Documentation and evidence requirements: Regulators expect HR AI documentation to include system inventories, risk classification records, vendor due diligence files, bias audit results, training completion records, and evidence of human oversight. Lexara builds documentation frameworks that align with both EU AI Act technical documentation requirements and internal governance expectations.

Vendor due diligence for HR AI tools: Most HR AI is purchased from vendors, not built in-house. Buyers should verify that providers can deliver risk classification documentation, conformity evidence, update protocols, and transparency materials. Lexara provides vendor due diligence frameworks for HR AI procurement, including contract terms and ongoing monitoring obligations.