Two legal frameworks that protect EU workers from AI

EU workers facing AI in the workplace are protected by two overlapping frameworks: the General Data Protection Regulation (GDPR), which provides data rights including the right to contest automated decisions; and EU employment law — implemented through national legislation — which provides anti-discrimination and procedural protections. The EU AI Act (in force from August 2024) adds a third layer, classifying employment AI as high-risk and imposing extensive obligations on employers — though the main employment AI obligations under Annex III do not apply until December 2027.

GDPR Article 22: the right against automated decisions

Article 22 is your strongest single right as a worker. It gives you the right not to be subject to a decision based solely on automated processing when that decision produces legal or similarly significant effects. Employment decisions clearly qualify: automated rejection of job applications, AI-generated performance scores that trigger disciplinary action, and algorithmic redundancy selection all produce legal or significant effects.

"Solely automated" is the key phrase. If a human is genuinely involved in the decision — not just signing off on the AI's recommendation, but actually applying their own judgment — Article 22 may not apply. But the Court of Justice of the EU and national data protection authorities have been clear that rubber-stamping an AI recommendation without genuine independent assessment does not constitute "human involvement" for this purpose.

Where Article 22 applies, you have three enforceable rights: the right to obtain human intervention in the decision; the right to express your point of view to that person; and the right to obtain an explanation of the decision and to contest it. These rights must be meaningful. Your employer cannot satisfy them by simply having a manager confirm the AI's output without independent review.

To exercise Article 22 rights, make a written request to your employer's Data Protection Officer or HR department. If your employer does not respond or does not have a genuine review process, you can file a complaint with your national data protection supervisory authority — each EU member state has one (contact details at edpb.europa.eu). Supervisory authorities can investigate, issue reprimands, and impose fines up to €20 million or 4% of global annual turnover for GDPR violations.

The right of access to your data

Under GDPR Article 15, you can request access to all personal data your employer holds about you, including data generated by or used in AI systems. This includes AI-generated performance scores, algorithmic assessments, and monitoring data. Your employer must respond within one month. Exercising this right can reveal what data the AI used to assess you, whether any errors occurred, and how decisions were made. If the data is inaccurate, you can request correction under Article 16. If it is no longer necessary, you can request erasure under Article 17.

Equal treatment under EU and national law

EU equality directives — implemented through national legislation in each member state — prohibit discrimination in employment based on sex, racial or ethnic origin, religion or belief, disability, age, and sexual orientation. These protections apply to AI-influenced employment decisions. If an AI recruitment tool produces systematically lower selection rates for women, or an AI performance system grades older workers lower, that creates a case for indirect discrimination regardless of the AI's intent.

Indirect discrimination requires showing that a measure, criterion, or practice that appears neutral in fact puts a group sharing a protected characteristic at a particular disadvantage, and that this cannot be justified by a legitimate aim pursued by proportionate means. If an employer cannot justify an AI tool's discriminatory outcomes, the tool constitutes unlawful discrimination.

File discrimination complaints with your national equality body. Most EU member states have both an equality body and access to employment tribunals or courts for discrimination claims. Time limits vary — typically 3-6 months from the discriminatory act in most member states.

Workers' information and consultation rights

The EU's Information and Consultation Directive requires employers with 50 or more employees to inform and consult employees about significant changes in work organisation. AI deployment that fundamentally changes how work is managed, monitored, or evaluated should trigger this obligation. Where European Works Councils exist (multinational companies above the EWC threshold), AI deployment affecting the workforce across multiple member states should be on the EWC agenda.

The EU Platform Work Directive (2024) creates a rebuttable presumption of employee status for platform workers, including a right to transparency about how algorithms that manage their work function — a landmark development for gig workers across the EU.

Practical steps for EU workers

Know your national supervisory authority and employment tribunal system — EU rights are generally enforced nationally. For GDPR issues, file with your national DPA. For employment discrimination, file with your national equality body or employment tribunal. In unionised workplaces, engage your union — EU unions are actively negotiating AI governance provisions in collective agreements. The ETUC (European Trade Union Confederation) has published model AI clauses for collective bargaining that many national unions are adopting. If you are a works council member, the EU AI Act creates a right to information about AI systems affecting workers — use it.