What the ICO's Recruitment Rewired report actually found

Regulatory guesswork is one thing; a regulator's own published findings are another. The Information Commissioner's Office's Recruitment Rewired report is one of the clearest pieces of evidence available on how UK organisations are actually handling automated decision-making today, and it is worth reporting on directly rather than paraphrasing secondhand.

The core finding

Based on direct engagement with employers in the recruitment sector, the ICO found that organisations frequently described their use of automated decision-making as "unlikely" — while the regulator's own assessment concluded that a number of them were using it in practice regardless. The gap was not between compliant and non-compliant organisations. It was between what organisations believed about themselves and what an external, informed review actually found.

Why the gap matters beyond recruitment

The ICO named recruitment as an early priority area precisely because CV screening, automated ranking, and video-interview scoring tools are widespread and easy to describe internally as "just software" rather than as a decision-making process with legal consequences attached. The underlying dynamic — a tool quietly making significant automated decisions while the organisation using it does not recognise that as what is happening — is not unique to recruitment. It is a pattern the regulator's own findings suggest is common wherever automated tools are adopted incrementally rather than assessed deliberately.

This is general awareness content, not legal advice, and does not cover the specific circumstances of any organisation or sector.