Data Privacy in AI-Driven HR

Data privacy in AI-driven HR comes down to the controls that make sure employee and candidate data used by AI systems gets collected on a lawful basis, limited to what the use case actually needs, protected from unauthorized access, and not kept around longer than necessary. That covers data entered into or stored in the system of record, the content retrieved to ground answers, the prompts and responses themselves, and whatever the system produces as output.

What strong practice looks like

Strong practice means anonymizing or pseudonymizing data before it goes in, isolating retrieval sources at the tenant level, masking personal information in prompts in real time, getting explicit consent for any use beyond fulfilling the actual request, and giving employees a visible history they can delete themselves. Data ownership should sit with the customer, contractually.