Everything the Application Knows: Recruitment Technology, Workforce Data, and the Rules That Reached HR
By Casey Scott McKay ·
Human resources spent thirty years building a data estate nobody classified as regulated, and then the rules arrived from four directions at once. This article maps what an applicant tracking system, a screening vendor, a monitoring tool, and a productivity dashboard actually hold, and which regime reaches each of them. It covers the automated employment decision statutes and their audit requirements, the consumer reporting rules that have governed background checks since long before anyone called it HR technology, the biometric statutes that catch video interviews and time clocks, and the state privacy laws that in some jurisdictions treat employees as consumers. It explains why the vendor contract is where most of the exposure is created and never read. It ends with the observation that the hardest problem is not any single rule but the inventory nobody has.
IP and Technology > Privacy Data Security | Article | Published 14 September 2023 - Updated 5 July 2025 | Casey Scott McKay - marksy.us
Summary. Human resources built a data estate for thirty years without anyone classifying it as regulated, and then the rules arrived from four directions at once. This article maps what an applicant tracking system, a screening vendor, a monitoring tool, and a productivity dashboard actually hold, and which regime reaches each of them: automated employment decision statutes and their audits, the consumer reporting rules that have governed background checks for decades, the biometric statutes that catch video interviews and time clocks, and the state privacy laws that treat employees as consumers. The vendor contract is where most of the exposure is created and never read. The hardest problem is the inventory nobody has.
Keywords: recruitment technology · workforce data · automated employment decision tools · bias audit · applicant tracking system · employee monitoring · background checks · FCRA adverse action · biometric consent · HR vendor terms · employee data rights · video interview statutes · algorithmic screening · data minimisation · subprocessor flow-down
This is premium Marksy content — the full document is available to subscribers.