AI hiring and UK law

The law in the UK

• UK GDPR and the Data Protection Act 2018 apply to the personal data collected when people apply for a job, including what they say on a screening call.
• UK GDPR gives people rights over decisions made solely by automated means that have a significant effect on them. The Data (Use and Access) Act 2025 updates these rules and keeps the safeguards: telling people, letting them reach a person, and letting them challenge the decision.
• The Equality Act 2010 applies to every stage of recruitment, including any tool used to screen applicants.
• The Information Commissioner's Office (ICO) regulates data protection in the UK and has published recommendations on AI tools in recruitment.

How Kit works within it

Kit recommends. Your people decide. Everyone for a job is asked the same questions. Under UK and EU GDPR.

Only people who agree are assessed, and every answer is in writing.

Every recommendation shows its reasons and the answers behind them.

Your IT team's questions, answered before they ask.

Data: Kept in the EU, in Ireland, on AWS.

Privacy: UK and EU GDPR. Retention, deletion and access requests are in our data agreement.

Security pack

Questionnaire, our suppliers and a data agreement ready to sign. Sent under NDA.