Appendix G. Data, AI, Privacy
data, AI, and privacy
Minimum data field set
Layer Fields
Candidate Source, consent, current stage, status, next step, owner
Assessment Criteria, verification method, fact, score, confidence, interviewer
Decision Decision, reason, owner, date, communication status
Offer Terms, approvals, risks, reason for acceptance or decline
Pipeline Basis, segment, consent / retention date, next permitted contact
AI usage log
Field What to record
Where AI was used CVs, questions, reason analysis, memo, QA
Input data What data was provided and whether it was permissible
Human review Who verified facts, privacy, and tone
What was changed Which claims were removed or corrected
Can the output be used Accept / rework / reject
Privacy checklist
Check Yes/No
Data is needed for the hiring purpose
Access is restricted to the appropriate participants only
There is a basis for retention or re-contact
Sensitive information is not recorded unless necessary
Retention / deletion dates are clear
External feedback complies with company policy