Appendix G. Recommendations on Data, AI, and Privacy
Minimum data field set
| Layer | Fields |
|---|---|
| Candidate | Source, consent, current stage, status, next step, owner |
| Assessment | Criterion, verification method, fact, score, confidence, interviewer |
| Decision | Decision, reason, owner, date, communication status |
| Offer | Terms, approvals, risks, reason for acceptance or decline |
| Pipeline | Basis, segment, consent / retention date, next permitted contact |
AI usage log
| Field | What to record |
|---|---|
| Where AI was used | CV summary, questions, reason analysis, memo, QA |
| Input data | What data was provided and whether it was permissible |
| Human review | Who verified facts, privacy, and tone |
| What changed | Which claims were removed or corrected |
| Can the output be used? | Accept / rework / reject |
Privacy checklist
| Check | Yes/No |
|---|---|
| Data is needed for the hiring purpose | |
| Access is restricted to the necessary participants only | |
| There is a basis for retention or repeat contact | |
| Sensitive information is not recorded unless necessary | |
| Retention / deletion dates are clear | |
| External feedback complies with company policy |
