EU AI Act for Biometric identification in Human Resources & Recruitment
Real-time remote biometric identification in publicly accessible spaces is prohibited under the EU AI Act with narrow law-enforcement exceptions.
Risk level
Biometric identification maps to a high-risk Annex III category, so the obligations below apply in full.
Annex III anchor
Annex III, §1
Score basis
A preliminary 96/100 based on the type of decision the system influences and how it is deployed in Human Resources & Recruitment.
Provider obligations
What the provider (developer) must do
Deployer obligations
What you must do as the deployer
Deployment
How Biometric identification shows up in Human Resources & Recruitment
Typical contexts
Signals it's in play
- Biometric processing
- Identity recognition
- Sensitive context
Recommendations
- Legal basis review
- Necessity test
- Strict access controls
Watch-outs
- Public-space identification
- Sensitive attribute inference
- Mass surveillance
FAQ
EU AI Act questions about Biometric identification
Is Biometric identification high-risk under the EU AI Act?
Biometric identification maps to Annex III, §1, which the EU AI Act treats as high-risk. In practice it is assessed as Prohibited risk, and the obligations below apply to providers and deployers.
Which EU AI Act articles apply to Biometric identification?
The obligations that typically apply are Art. 5 — prohibition on real-time remote biometric ID in public spaces; Art. 5 — strict exception framework for law enforcement; otherwise prohibited; Art. 26 — where lawful, deployer oversight and audit. Providers (developers) carry the technical duties; deployers (operators) carry the use, oversight, and transparency duties.
Who is responsible — the provider or the deployer of Biometric identification?
Both. Providers owe the technical obligations such as Art. 5. Deployers owe Art. 5, Art. 26. The split matters for procurement and vendor agreements in Human Resources & Recruitment.
What should you watch out for with Biometric identification?
Common failure modes include: Public-space identification; Sensitive attribute inference; Mass surveillance. Mitigations typically start with Legal basis review and Necessity test.
Where does Biometric identification typically appear in Human Resources & Recruitment?
Typical deployment contexts include Law enforcement real-time identification and Workforce or patient authentication (permitted under baseline). Before deploying, confirm whether the specific use triggers the high-risk obligations listed above.
Sources
Citations & further reading
Related
More AI use cases in Human Resources & Recruitment
AI hiring assistant
Screens, ranks, or recommends candidates during recruitment.
Read the guideCustomer support chatbot
Automates customer conversations and support triage.
Read the guideEmployee monitoring AI
Tracks productivity, behavior, sentiment, or performance at work.
Read the guideAI resume parser
Parses unstructured CVs/resumes into structured candidate profiles.
Read the guideAutomated CV screening
End-to-end reject/advance decisions on CVs without human review.
Read the guideAI recruitment chatbot
Conversational AI that interacts with job candidates during sourcing.
Read the guideWorker activity tracker (keystroke/mouse)
Captures granular activity logs and scores worker behaviour.
Read the guideEmotion recognition in the workplace
Detects or infers worker emotions for HR decisions.
Read the guideAI video interview assessment
Analyses video interviews for engagement, confidence, or fit.
Read the guideBiometric access control (workforce)
Employee or patient biometric authentication for premises or systems.
Read the guideAI voice cloning
Creates synthetic voice audio from recordings of a real speaker.
Read the guideSynthetic recruiter avatar
Synthetic video avatars used to conduct or appear in recruitment.
Read the guideAI on-call staff rostering
Allocates on-call shifts to clinical or operational staff based on demand/availability.
Read the guideAI warehouse worker routing
Optimises pick-and-pack routes per worker in real time.
Read the guideAI content moderation
AI that flags, removes, or ranks user-generated content.
Read the guideDeepfake content generation
Creates synthetic media that can convincingly depict real or synthetic persons.
Read the guideAI vendor credentialing
Onboarding AI that scores vendor documents, KYB data, and risk signals.
Read the guideAI document summarisation
Generates concise summaries of long regulatory or contractual documents.
Read the guideExplore
More industry guides
Describe your exact system, get a personalised read
The guide above is a general baseline for Biometric identification. The free Risk Scanner maps your specific implementation and surfaces hidden compliance blind spots.
Open the Risk ScannerPreliminary EU AI Act clarity summary. Not legal advice.