The sixth coordinated enforcement action of the European Data Protection Board of EU privacy authorities announced on 11 November 2026 will examine whether the AI agent that screens job applications takes a decision based solely on automated processing within Article 22(1) of the GDPR, and whether the employer running it can explain that decision under Article 15(1)(h).
12
