From the course: Ethical AI for Hiring and Talent Acquisition: A Conversation with Don Phin

How is candidate data handled by AI, and what are the risks?

From the course: Ethical AI for Hiring and Talent Acquisition: A Conversation with Don Phin

Start my 1-month free trial

How is candidate data handled by AI, and what are the risks?

“

- Don, how do AI hiring tools handle candidate data and what are the biggest risks here? - The hiring data is no different than a resume that you send in. Like the old school, you give a resume. That's hiring data, okay? Ad the first thing to understand is the law the EEOC requires employers to keep hiring data for at least one year. That's a legal requirement, all right? So we want to make sure we have the data, that it's properly stored, that it's secure, that other people can't hack into it. And after that one year, we have almost like a document destruction policy where we have a data destruction. They call it de-identifying. But a data destruction policy so that that goes away. Nobody's ever gets to see it again, okay? It's not stored someplace. It's destroyed after one year, all right? We have to make sure that the access to the information is limited to a need to know. So just like somebody going into HR's office when they're not around and looking in somebody else's personnel file to find out something about them, right? It's no different than having a file drawer. You have to keep it so it's limited to who has access to that data, okay? And again, we still... It goes back to the informed consent people, no surprises that you're using this AI data that's creepy and violates my privacy and things like that. That's the most important things I can think about. - Do you have any other advice about what best practices should companies follow to protect candidate privacy when using AI in hiring? - It's almost like an IT question. And, the bottom line is, if I'm using that, I'm having my IT people speak to the vendors and understand, because that stuff's way over my head. And make sure that whatever data encryption that they have, it's up to standards. Just 'cause you have data encryption doesn't mean it's good data encryption, right? So somebody who knows how to ask the right questions, even if you have to hire these third-party consultants that are jumping into the space right now to do that.

Contents