Future of Privacy Forum releases updated AI risk assessment framework and best practices for hiring

What happened

Future of Privacy Forum and leading HR software firms released Updated Best Practices for AI and Workplace Assessment Technologies, addressing generative and agentic AI in employment. The guidance outlines a risk assessment framework and assigns responsibilities to developers and deployers for governance, non‑discrimination, transparency, data security, privacy, and human oversight. A webinar on September 28 will present the framework to policymakers and practitioners.

Why it matters for trust and compliance

• Its status is announced. It is not law yet. Track it, but do not treat it as an obligation.
• The updated best practices give organizations concrete guidance to responsibly deploy AI in hiring, mitigating legal and ethical risks.
• It relates to EU AI Act. The regulations library explains what that law requires.

Who is affected

Recommended actions

1. Check that privacy notices describe the practices this addresses.
2. Map the security requirements to existing controls and close gaps.
3. Inventory AI or automated decision systems in scope and their assessments.