The short answer
A UK recruitment agency should automate the records it is already required to keep before it automates any decision about a candidate. Timesheets, assignment records, regulation 19 confirmations and follow-up right to work checks run often and decide nothing. Screening and ranking run once per applicant, and every rejection is a decision governed by the Equality Act 2010 and by the automated decision rules in data protection law.
Key takeaways
- Sort each placement step by two questions: how often it runs, and whether it decides something about a person. Automate the frequent steps that decide nothing first.
- The Conduct of Employment Agencies and Employment Businesses Regulations 2003 already define the confirmations and records most automation projects set out to capture, and they allow the records to be electronic.
- A digital right to work check does not move the liability. The employer stays liable for a civil penalty of up to £60,000 per illegal worker.
- Screening is the step vendors demonstrate first, and the one where the agency carries the duty as an employment service-provider under section 55 of the Equality Act 2010.
- Since 5 February 2026, a solely automated significant decision is permitted only with safeguards, including human intervention and a way to contest it.
Take a recruitment agency with eleven consultants and forty temps on assignment, shown two demonstrations in the same week. One ranks two hundred applicants for a finance vacancy in under a minute. The other chases timesheets and matches each hour to the pay rate on the assignment. The director buys the first, because it is the one that looked like artificial intelligence.
It was the wrong order. Forty temps on weekly timesheets is up to 2,080 submissions a year, each one a record the agency has to be able to produce. Two hundred applicants is one vacancy, and every rejection the software makes is a decision about a person that UK law now attaches safeguards to. The ranking tool saves hours on the step with the most exposure. The timesheet tool saves more hours on a step with almost none.
Sort every step by two questions before buying anything
How often a step runs decides the hours it can return. Whether it decides something about a person decides the exposure. A step that runs per worker per week grows with the desk. A step that runs per vacancy grows only with the roles the agency takes on. Put the two questions together and the order follows.
1. Automate first
Weekly, and records what happened
Timesheets matched to the assignment pay rate. Reminders for follow-up right to work checks before a time-limited permission ends.
Regulation 29: records kept for at least a year
2. Automate second
Per candidate, and records what happened
Regulation 19 confirmations logged with their documents and dates. Interview scheduling.
Schedule 4, paragraph 11
3. Automate with a named reviewer
Weekly, and decides about a person
Offering shifts and bookings among the temps on the books. Flagging a worker for removal from an assignment.
Equality Act 2010, section 55(2)
4. Automate last, if at all
Per candidate, and decides about a person
Scoring and ranking applications. Rejecting applicants before a consultant has read them.
Section 55(1) and Articles 22A to 22C
Start with the records the regulations already make you keep
Before introducing or supplying anyone, an agency must confirm the work-seeker's identity and that they hold the experience, training, qualifications and any authorisation the role needs. That is regulation 19 of the Conduct Regulations. Schedule 4 then requires details of those enquiries to be recorded with copies of the documents and the dates they were received or sent, and regulation 29 requires the records to be kept for at least a year, in electronic form if the agency prefers.
Read that as a supplier would and it is a specification. The fields are defined and the evidence standard is set by the regulations rather than by a vendor. Capturing the confirmation at the moment it happens does not change what the agency does, only whether it can prove it. It is the same test that decides what an accountancy practice can hand to software: what the rule at the end of the task will accept. Much of cell one is also a setting in software the agency already licenses, which is where a licence usually beats a retainer.
Right to work: automate it for the people you employ
Using a certified digital verification service to check a British or Irish passport holder does not move the liability. The Home Office employer's guide states that the employer, rather than the provider, remains liable for the civil penalty of up to £60,000 per illegal worker where the check was not completed correctly. It recommends choosing from the register of certified providers.
For an employment business that employs the temps it supplies, the check and the liability sit in the same place, so automating the check and its follow-up reminders is sound. Permanent placements are different. Outside the certified route for those passports, the guide says an employer cannot establish a statutory excuse where the check is performed by a third party, and gives a recruitment agency as the example. An automated check sold to a client as their protection is selling something the rule does not give them.
| What went wrong | Who answers | The rule |
|---|---|---|
| A digital right to work check on a temp you employ was done incorrectly | The agency, not the provider | Home Office employer's guide, penalty up to £60,000 per illegal worker |
| A client relied on your check for a permanent hire | The client, who gains no statutory excuse from it | Home Office employer's guide, on checks by a third party |
| A screening filter excluded applicants in a way that discriminates | The agency, as an employment service-provider | Equality Act 2010, section 55(1) |
| A candidate was rejected with no meaningful human involvement | The agency, as the controller taking the decision | Articles 22A and 22C, in force from 5 February 2026 |
Before you sign a software contract
Not sure which step your desk should start with?
Free to your firm. The agency pays us, and only if the relationship works, which is why we would rather tell you a setting in software you already use does the job than introduce somebody to build a screening tool.
Get a recommendationScreening is where the demonstrations start and the law bites
Section 55 of the Equality Act 2010 bars an employment service-provider from discriminating in the arrangements it makes for selecting the people it provides the service to, and a screening tool is one of those arrangements.
The Information Commissioner's Office audited providers of recruitment tools between August 2023 and May 2024. It found search features that let recruiters filter out candidates with protected characteristics, and tools inferring gender and ethnicity from a name. It made almost 300 recommendations, and found providers that had tried to pass all responsibility for compliance to the recruiters using the tool, through contracts it called vague or unclear.
Since 5 February 2026, section 80 of the Data (Use and Access) Act 2025 has replaced the old Article 22 of UK GDPR with Articles 22A to 22D. A significant decision taken with no meaningful human involvement is permitted, but only with safeguards: the candidate must be told and be able to make representations, and must be able to obtain human intervention and contest the decision. Where special category data is involved, Article 22B narrows it much further. None of that forbids a screening tool. It means the agency has to name who reviews a rejection before the tool goes live.
When an agency should not automate yet
Two conditions make buying premature, and neither is about the software.
- Nobody can name who reviews an automated rejection, or how a candidate reaches that person. Keep screening manual and automate the records around it until that exists
- The desk is too small for the frequent steps to be frequent. A permanent desk placing a few candidates a month gains little from automating a step that runs a few times a month
Saying so costs us the introduction fee, since we are paid by the agency and only when a relationship works. When a supplier genuinely is needed, brief it on hours you have measured rather than on the demonstration. What we assess before recommending anyone is set out for recruitment agencies across the UK.
Frequently asked questions
What agency directors ask before they buy the software.
What should a recruitment agency automate first?
The steps that run most often and decide nothing about a person: timesheet collection, assignment records, regulation 19 confirmations with their documents, and reminders for follow-up right to work checks. They return the most hours on a temp desk and carry the least exposure, because they record what happened rather than choosing who progresses.
Is it lawful to use AI to screen candidates?
Yes, with conditions. Section 55 of the Equality Act 2010 applies to the arrangements an agency uses to select candidates. Since 5 February 2026, a significant decision taken with no meaningful human involvement needs safeguards under Articles 22A to 22D of UK GDPR, including access to human intervention and a way to contest it.
Does a digital right to work check move the liability to the provider?
No. The Home Office guide states that where a digital verification service is used, the employer rather than the provider remains liable for the civil penalty if the check was not completed correctly. The penalty is up to £60,000 per illegal worker.
Who is responsible if a screening tool discriminates?
The agency using it. Section 55 puts the duty on the employment service-provider making the selection arrangements, and the Information Commissioner's Office found providers trying to pass all compliance responsibility to recruiters through vague contracts. Check which party the contract names as controller before signing.
When should a recruitment agency not automate yet?
When nobody can say who reviews an automated rejection and how a candidate reaches that person. The other case is a desk too small for the frequent steps to be frequent: a permanent desk placing a few candidates a month recovers little from automating a step that runs a few times a month.
Sources and useful reading
- Conduct of Employment Agencies and Employment Businesses Regulations 2003, for the confirmations before an introduction and the records kept afterwards.
- Home Office, right to work checks: an employer's guide, for the penalty and the rule on checks by a third party.
- Equality Act 2010, section 55, on employment service-providers.
- Information Commissioner's Office, AI tools in recruitment audit outcomes report, November 2024.
- Articles 22A to 22D, as substituted by the Data (Use and Access) Act 2025, for significant decisions and their safeguards.
This article is commercial decision support and is not legal or immigration advice. The timesheet figures are illustrative. Whether a particular automated step is a significant decision is a judgement for the agency.