Candidates selection for a position may feel like an overwhelming challenge (Oh! so many candidates applied at the same time!). So you may be tempted by using ChatGPT or other stuff to filter out candidates. (Beware: this is not legal, at least not in the EU). I am going to tell you why this is a bad idea!

What about the law? The EU AI Act classifies this task as high-risk. This implies a certain number of mitigation mechanisms that you should be putting in place to make sure that transparency, explainability and bias mitigation meet standards. Human supervision should be in place. And, you should be paying attention to where the candidate data is being sent (is this a publicly hosted service? Is this a self-hosted AI model?)

The GDPR then obliges you to 1) have a lawful basis (your business interest must outweigh the candidate privacy interest) 2) inform the candidate about how you are going to process their data, and 3) get a mandatory Data Protection Impact Assessment (DPIA).

I hope this helps taking the right choice!