Skip to content
    Back to articles

    What Does the EU AI Act Delay Mean for AI Used in Hiring?

    October 23, 2026 5 min read
    Share
    Conveyor belt of grey system blocks with one orange block mounted, symbolising AI used in hiring and HR

    The EU has moved the high-risk obligations for AI used in employment and worker management from August 2, 2026 to December 2, 2027. The requirements remain, so a CIO should use the extra time to find every system that touches hiring or worker management and agree with HR who owns each one. That can apply to companies based outside Europe when a system's output is used in the EU.

    This piece summarises published legal analysis for planning purposes. It is not legal advice, and your counsel should confirm how the rules apply to your systems.

    Picture a CIO asked a simple question by the CHRO: which of our systems use AI to make or shape decisions about people? The applicant tracking system has a ranking feature someone switched on last year. The performance platform added AI-written review summaries in a spring update. A recruiting team in Dublin uses a screening tool bought on a credit card. The honest answer is a spreadsheet nobody has built yet, and until it exists, every other compliance conversation is guesswork. Building it is a technology task first, because the evidence sits in systems the CIO already runs.

    What did the Digital Omnibus change for AI in employment?

    It moved the date and left the obligations in place. The Digital Omnibus on AI, Regulation (EU) 2026/1744, was published in the Official Journal of the European Union on July 24, 2026 and entered into force on July 27, 2026, according to Cooley's analysis of August 3, 2026. Cooley's table shows the deadline for stand-alone high-risk systems listed in Annex III of the AI Act, such as employment and education, moving from August 2, 2026 to December 2, 2027.

    Jones Walker's analysis of July 16, 2026 states that the Annex III use cases include "employment and worker management," and that "Conformity assessments, technical documentation, human oversight controls, and applicable EU database registration requirements are still coming." The firm says the EU deferred the timeline because national authorities and harmonized technical standards were not ready.

    Orrick's summary of July 29, 2026 adds a detail that matters for planning: AI systems placed on the EU market before the new date will be subject to those requirements only if they are substantially modified after it. Whether that helps a given system is a question for counsel, and it depends on facts a CIO is best placed to gather.

    Does the EU AI Act apply to a US company's HR systems?

    It can. Jones Walker notes that the Act reaches providers and deployers established outside the EU "where the output produced by the system is used in the Union." A US company with employees or candidates in Europe, or a European team using a US-built hiring tool, should not assume the Act stops at the border. Separately, Jones Walker notes that most Article 50 transparency obligations, such as telling people when they are interacting with an AI system, applied from August 2, 2026, so those are already in force.

    Why is this a CIO problem as much as an HR problem?

    HR owns the decisions about people. The CIO is the person who can see which systems are making or shaping them. AI features now arrive inside tools the company already pays for, often switched on in an update, and teams adopt their own tools when the approved ones do not fit. Neither shows up in an HR policy. Both show up, eventually, in an integration log, a software inventory or an expense report.

    The vendor relationship sits with the CIO too. Many AI features in hiring and performance tools are built by the vendor and switched on by the customer, which raises questions only a contract can answer: which features use AI, what the vendor considers its own obligations under the Act, and what documentation it will provide. Adding those questions to the next renewal costs nothing and produces the evidence counsel will want. Jones Walker also notes that high-risk AI embedded in regulated products under Annex I moves to August 2, 2028, which matters for some operations technology, though less for HR systems.

    Average Robot calls the right response governed enablement: rules people can follow while they do their work, so the safe path is also the easy one. Applied here, it means the CIO and CHRO agree on a short, usable standard for any AI that touches people decisions, and make the approved route faster than the workaround. A rulebook that stops people working tends to push the same activity somewhere less visible.

    This is the Direction link in the AI Profitability Gap, the chain Average Robot uses to trace AI spend through to return (how the chain works). Direction covers who decides what AI is pointed at. When AI is pointed at decisions about people, that choice needs a named owner on the HR side and a named owner on the technology side, and both need the same list of systems.

    What should a CIO do with the extra time?

    Each of these can start this quarter without new spend.

    1. Build the inventory. List every system that uses AI to screen, rank, evaluate, schedule or monitor people, including features inside existing HR and collaboration tools.
    2. Record where each system's output is used. Note whether any output reaches candidates or employees in the EU. That is the fact counsel will ask for first.
    3. Note when each system was deployed and last changed. Orrick's point about substantial modification makes version history worth keeping now.
    4. Assign an owner pair. For each system, name one HR owner and one technology owner, and give them the same review date.
    5. Write one page of rules people can use. Say which AI uses in people decisions are approved, which need review and which are off limits, and make the approved route quick.

    If you want a quick read on where your organization stands before that work begins, take the free AI Profit Readiness Assessment. It takes about two minutes, and your result appears on screen when you finish.

    Take it with you

    Download this as a PDF

    A clean, branded version to read offline or share with your team.

    Frequently Asked Questions

    When do EU AI Act high-risk rules apply to hiring and HR systems?

    According to legal analyses by Cooley and Jones Walker, the Digital Omnibus on AI moved the obligations for stand-alone Annex III high-risk systems, which include employment and worker management, from August 2, 2026 to December 2, 2027. The regulation was published in the Official Journal on July 24, 2026. Confirm how it applies to your systems with counsel.

    Does the EU AI Act apply to companies outside the EU?

    It can. Jones Walker's July 2026 analysis notes that the Act reaches providers and deployers established outside the EU where the output produced by an AI system is used in the Union. A company with candidates or employees in Europe should check which of its systems produce output used there.

    What still applies to high-risk AI after the delay?

    Jones Walker states that conformity assessments, technical documentation, human oversight controls and applicable EU database registration requirements are still coming for high-risk systems. The delay changes the date and leaves the obligations in place, so organizations can use the time to build inventories and controls.

    What should a CIO do about AI in HR systems now?

    Build an inventory of every system that uses AI to screen or rank people, including features added to existing tools. Record where each system's output is used and when it was last changed. Then assign each system an HR owner and a technology owner who review it together.

    Share
    Newsletter

    With People

    The people side of making AI pay.

    • One story from the news about AI at work, read through our book, The Elephant in the Algorithm.
    • A few links worth your time, and sometimes a podcast conversation.
    Privacy Policy