Compliance with the Data Protection Act with regard to the use of artificial intelligence to process personal data.

Compliance with the Data Protection Act with regard to the use of artificial intelligence to process personal data.

Nowadays, an increasing number of companies are integrating artificial intelligence solutions into their recruitment processes.

The potential of these systems to examine massive datasets, detect patterns and learn over time is the main reason for this level of adoption. Their accuracy is reinforced by the increased availability of personal data in the hands of organisations, which becomes the basis for determining the outcome of the decision.

However, the use of this mechanism for this type of management has led to legal problems. In the area of data protection law, the GDPR has established a specific regulation for processing operations whose purpose is to make decisions based solely on the opinion issued by a machine. Article 22 of the GDPR provides individuals subject to such decisions with different powers, proving to be an essential legal support for any legal operator who intends to deal with this issue. 

To avoid these situations, Seifti offers comprehensive solutions to help companies comply with the Data Protection Act.

Automated decisions and the right to object

In 2020, a guide was published outlining how artificial intelligence tools should be brought into line with the GDPR. The aim of this is to avoid discrimination, unfair decisions or denial of a service or product when the decision is made by a machine. However, to date, the controversy as to the actual adequacy remains dormant.

The debate revolves around Article 22 of the GDPR, which dictates in its first paragraph that “every data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her”.

In this sense, if automated processing results in the refusal of a job, the personal data subject may object to such processing. In other words, he or she can challenge the decision and request the contribution of a person in the process to review the decision taken by the algorithm. 

Compliance with the Data Protection Law

A company that does not comply with the GDPR is exposed to multiple negative consequences. These include loss of reputation, which has a direct impact on the trust that users have in the brand. It can also be affected financially, with the imposition of fines.

To avoid these problems, Seifti offers its services to automate processes and comply with the Data Protection Act. With the help of these industry specialists, companies can avoid breaches and stay on top of regulatory changes.