A DPIA describes the processing, explains why it is necessary and proportionate, identifies risks to individuals and records the measures that reduce them. For an AI screening tool, that might cover what candidate data is collected, how scores are produced, who reviews them, how long recordings are kept and how candidates can query an outcome. In the UK, the ICO publishes guidance and a template that many organisations follow.
Automated evaluation of applicants is commonly treated as likely to be high risk, so many employers complete a DPIA before launching AI-assisted screening rather than after. The exercise is most useful when the data protection officer, recruiters and the vendor work on it together, and when it is revisited as the tool or its use changes. Legal advice is worth seeking on specific cases.