Aipedia: Recruitment agencies
UK recruitment agencies can use AI, but the Conduct Regulations, UK GDPR and the Equality Act still apply to every decision it touches. Agencies sit between candidates and hirers, so an AI error can produce claims from both sides.
Part of: AI in recruitment agencies
In short
AI tools can now source, screen, match and message candidates, and some UK agencies may use them. No law bans it, but the Conduct Regulations 2003, now enforced by the Fair Work Agency, still require the agency to confirm identity, qualifications and suitability itself. Since 5 February 2026, automated shortlisting or rejection without meaningful human involvement is a significant decision that needs Article 22C safeguards. The ICO has audited AI recruitment tools and says safeguards are weaker than the law requires. There is no statutory PI requirement for agencies, and how PI treats AI-related claims depends on the wording.
AI can now reach most stages of agency work. Possible uses include:
Each use saves time, and each moves a judgement that the agency is accountable for into a system that the agency usually did not build.
There is no AI-specific regulator for recruitment. Instead, existing regimes apply:
The REC Code of Professional Practice has 10 principles and does not mention AI. Its principles on honesty (2), diversity (4), professional knowledge (6) and handling personal information (10(b)) still apply to AI-assisted work.
The Conduct Regulations place duties on the agency, not on its software:
| Regulation | Duty | Where AI touches it |
|---|---|---|
| reg 18 | Get enough information from the hirer to select a suitable worker | AI-drafted briefs and adverts |
| reg 19 | Confirm identity, experience, training, qualifications, authorisations (including right to work) and willingness, and keep evidence | CV parsing and ID tools; parsing does not discharge this duty |
| reg 20 | Take all reasonably practicable steps so a placement is not detrimental, and act on unsuitability information | Reference summaries and matching |
| reg 21 | Pass reg 19 information to the hirer, confirmed in writing within 3 business days | Automated submissions and reformatted CVs |
| reg 22 | Extra checks for roles with vulnerable people: two references, qualifications, DBS | Automated vetting workflows |
| reg 28 and 29 | Confidentiality of work-seeker information; records kept for at least 12 months | Third-party AI tools and logs |
Data protection adds another layer. Section 80 of the Data (Use and Access) Act 2025 came into force on 5 February 2026 and inserted Articles 22A to 22D into UK GDPR. Automated shortlisting or rejection without meaningful human involvement is a significant decision, and candidates must get the Article 22C safeguards: information, the chance to make representations, human intervention and a way to contest it. From 19 June 2026, organisations also need a data protection complaints procedure and must acknowledge complaints within 30 days.
The ICO's audit of AI recruitment tools (6 November 2024) made almost 300 recommendations. It found tools that filtered candidates by protected characteristic, inferred ethnicity or gender from names, and kept data indefinitely to build databases without telling candidates. Its Recruitment rewired report (31 March 2026) said solely automated hiring decisions are likely common, that safeguards are weaker than the law requires, and that it will scrutinise recruitment platforms as well as employers.
DSIT's Responsible AI in Recruitment guide (25 March 2024), written with contributions from the REC and APSCo, sets out assurance at procurement, pilot and live use, including DPIAs, bias audits and performance testing. The REC AI hub advises keeping humans in decisions and auditing for bias, and the REC offers a member AI policy template. APSCo Global's AI and Recruitment guide (22 September 2025) recommends a board-level AI lead and AI literacy training for all staff. The detail is in AI rules for recruiters explained.
No UK tribunal ruling or FWA or EAS enforcement action specifically about an agency's use of AI was found as at October 2026.
No statutory PI requirement for employment agencies or businesses appears in the Conduct Regulations guidance, and no REC or APSCo PI minimum was verified. Hirers commonly ask for PI in their terms of business. A recruiter's PI policy usually responds to claims alleging negligence in the professional service, such as a placement made without proper checks, whether or not AI was involved. Discrimination, data protection and fines may be excluded or limited, and some wordings may address AI expressly while others are silent. Our recruitment consultants PI guide covers the basics, and does recruiters' PI cover AI mistakes? looks at AI wording in detail.
Apex arranges PI for recruitment agencies and consultancies. A broker can review your cover and how your policy treats AI-assisted sourcing, screening and vetting; see PI broking for recruitment agencies.
Yes. No UK law bans AI in recruitment. The agency must still meet the Conduct Regulations 2003, UK GDPR including the Article 22A to 22D automated decision rules, and the Equality Act 2010, and it remains responsible for what its tools do.
The Fair Work Agency, which began operating on 7 April 2026 and replaced the Employment Agency Standards Inspectorate. It enforces the Employment Agencies Act 1973 and the Conduct Regulations 2003. Candidate data issues sit with the ICO and discrimination with the EHRC.
No statutory PI requirement for employment agencies or businesses was found in the Conduct Regulations guidance, and no REC or APSCo minimum was verified. Hirers commonly ask for PI in their terms of business, so agencies may hold it to win and keep clients.
No. The REC Code of Professional Practice has 10 principles and does not mention AI. The REC publishes separate AI guidance for members and a model AI policy, and its existing principles on honesty, diversity and personal information still apply to AI use.
Tell us about your firm and the work you do. A broker will review how your current PI treats AI-assisted work, or arrange new cover. No fee for a quote. Or call 0117 325 0027.
Start a PI quote Request a callbackApex Insurance Brokers Limited is authorised and regulated by the Financial Conduct Authority. Registered in England and Wales, company number 07014570. This page is general information about how AI is used in the profession and how insurance may respond. It is not legal, regulatory or insurance advice on your circumstances, and it does not guarantee that cover will be available or on what terms.