There is no doubt that the use of AI has provided benefits in the employment and HR context. But using AI involves processing personal data, which is subject to data protection laws, such as the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA 18). Governments and regulators around the world are struggling to promote and regulate the use of ethical AI that remains compliant with laws. An AI auditing framework has been drafted by the UK’s ICO, along with guidance together with Alan Turing Institute that explains decisions made with AI. Included in the guidelines, which are designed to be read in tandem and are aimed at those with a compliance focus and technology specialists, are the topics of lawfulness, fairness and transparency; data quantity considerations; decision-makers; fairness of the AI; and appropriate governance, among other topics.