AI in HR:
Governance Handbook
for the CHRO

Compliance, Works Council, and Decision Layer
before August 2026

Author: Bert Gogolin, Managing Director
Publisher: Gosign GmbH, Hamburg
Published: March 2026
Scope: 25 pages

Contents

1 Why the CHRO Must Lead AI Governance in HR
2 Three Types of Decisions: Human, Rule Engine, AI
3 EU AI Act: 6 Mandatory Requirements for HR AI
4 Works Council as Design Partner
5 4 HR Processes in the Decision Layer
6 Readiness Assessment
7 Next Steps
73%
without an AI governance framework
ISACA 2024
6
mandatory requirements from Aug. 2026
EU AI Act
85-92%
zero-touch rate in Decision Layer
Gosign projects

1 — Why the CHRO Must Lead AI Governance in HR

AI in HR is not an IT project. It is a governance project with a technical component.

Who defines at what confidence level a payroll calculation may run automatically? Who determines which bias definitions apply? Who decides whether a recruiting agent may pre-screen resumes?

The answer is not the CIO. It is the CHRO.

According to ISACA (2024), 73% of organisations lack a formal AI governance framework. In HR, this means critical processes such as payroll, recruiting, and workforce planning operate without defined control structures.

Three Governance Levels

LevelResponsibilityWho
Decision MatrixDefines what the agent may do and what stays with humansHR + Legal
Audit TrailEvery action logged, versioned, reproducibleIT (technical), HR (review)
Role ModelWho monitors, who approves, who escalatesHR
Works Agreement TemplatesDocumentation for the Works AgreementHR + Works Council
Escalation PathWhat happens in cases of uncertainty or low confidenceHR + IT
Checklist

Before the first agent goes live:

According to Gartner (2024), 30-40% of all AI projects fail due to missing governance structures. Not due to technology. Not due to budget. Due to organisation.

2 — Three Types of Decisions

Every HR process consists of hundreds of micro-decisions. The Decision Framework classifies each one.

TypeDecided byExamples
Human (H)Case worker or Works CouncilTermination, formal warning, suspicion of discrimination
Rule Engine (R)Collective agreement, Works Agreement, statutePay grade, bonuses, leave entitlement, social security contributions
AI-eligible (A)Agent with confidence routingDocument classification, anomaly detection, routing

The Golden Rule

AI classifies - it does not calculate. An agent recognises that a receipt is a travel expense claim. But the per diem rate is calculated by the rule engine.

Rule engines calculate - they do not decide. The rule engine applies the collective agreement. But whether an employee is promoted is decided by a human.

Humans decide where the law requires it. Not because they are better at it - but because it is required.

Agent Readiness Score

Score = (R + A) / Total x 100

HR ProcessScoreMeaning
Payroll85-95%Highly automatable (rule engine-dominated)
Time Tracking80-90%Highly automatable
Travel Expenses75-85%Well automatable
Recruiting40-55%Partially automatable (significant Human-in-the-Loop)
Performance Mgmt.20-35%Primarily human

The lower the score, the more Human-in-the-Loop. That is not a deficiency - it is by design.

3 — EU AI Act: 6 Mandatory Requirements

The EU AI Act classifies AI systems in employment contexts as high-risk (Annex III No. 4).

AI systems intended to be used for recruitment or selection of natural persons, in particular for placing targeted job advertisements, analysing and filtering applications, and evaluating candidates.

From August 2026, six mandatory requirements apply (subject to the Digital Omnibus Package - possible postponement to December 2027):

RequirementArt.Decision Layer
Risk Management9Confidence Routing - confidence score per decision, configurable thresholds
Data Governance10Versioned rule engines - every change traceable
Record-Keeping12Audit Trail - input, rule, confidence, and result logged
Transparency13Decision Layer documentation - every decision traceable
Human Oversight14Enforced Human-in-the-Loop - architectural, not optional
Accuracy/Robustness15Bias monitoring - systematic checks by gender, age, origin
Compliance Checklist

Sanctions: Up to EUR 15 million or 3% of global annual turnover.

4 — Works Council as Design Partner

Works Councils do not block AI. They block poorly prepared projects.

Section (BetrVG)SubjectRelevance for AI
§ 87 (1) No. 6Technical monitoringAny AI system processing employee data
§ 87 (1) No. 10Remuneration principlesSalary calculation, bonuses, allowances
§ 87 (1) No. 5Leave principlesLeave planning, absence management
§ 99Transfer, gradingPersonnel decisions influenced by AI
§ 94Employee questionnairesRecruiting forms with AI evaluation

Works Agreement as Technical Constraint

In the Decision Layer, Works Agreements are implemented as technical constraints - not as a PDF in a folder:

AI Literacy Obligation (since February 2025)

Art. 4 EU AI Act: All persons who operate or oversee AI systems must possess sufficient AI competence. According to BCG (2024): allocate 12-22% of the AI budget for training.

RoleTraining ContentRefresher
HR Case WorkerSystem understanding, escalation, interpreting resultsAnnually
Works CouncilAudit functions, bias detection, inspection rightsAnnually
CHRO/HR LeadershipGovernance framework, compliance, strategySemi-annually
IT OperationsTechnical operations, monitoring, incident responseQuarterly

5 — 4 HR Processes in the Decision Layer

Payroll - Eliminating Correction Postings

According to Hackett Group (2024), companies with explicit rule engines reduce correction postings by 60-80% in the first year.

DecisionTypeExample
Collective agreement gradingRule EnginePay group E8, Step 3, regional tariff area NRW
Allowance calculationRule EngineNight shift +25%, public holiday +100%
Social security contributionsRule EngineHealth ins. 14.6% + surcharge, pension 18.6%, unemployment 2.6%
Anomaly detectionAISalary deviates >15% - flag for review
Approval for deviationHumanConfirm back-payment >EUR 500

Result: 85-92% zero-touch. Correction postings -60-80%.

Travel Expenses - 40-120 Micro-Decisions per Case

According to GBTA Foundation: USD 58 per case, 19% error rate, USD 52 per correction. At 100,000 cases: USD 6.8 million/year.

IndustryZero-TouchCases/Year
Aviation/Logistics95%100k-1M
Sales90%120k+
Consulting85%50k-250k

Recruiting - Governance for High-Risk

Annex III No. 4: "Analysing and filtering of applications" = high-risk. Double governance depth required.

PhaseTypeWhat Happens
CV ParsingAIExtraction of qualifications
Requirements MatchingAI + Rule EngineMatching with confidence score
ShortlistingHumanRecruiter reviews all suggestions
DecisionHumanHiring is always a human decision

Leave & Absence

Complexity arises from collective agreements, Works Agreements, and special regulations (Federal Leave Act, disability provisions, partial retirement, MaRisk mandatory leave). Result: 78-87% zero-touch.

6 — Readiness Assessment

10 questions for the CHRO. Rate each with 0 (no), 1 (partially), or 2 (yes).

#Question012
1We have an inventory of all AI systems in HR (incl. shadow AI).
2There is a designated owner for AI governance in HR.
3The Works Council is informed about AI usage.
4For every automated decision, the type is defined: H, R, or A.
5An audit trail exists for AI-supported decisions.
6Escalation paths and thresholds are documented.
7HR employees have completed AI literacy training (Art. 4).
8A framework Works Agreement for AI is in progress or completed.
9We can demonstrate freedom from discrimination.
10We have a plan for August 2026.
ScoreRatingRecommendation
16-20ReadyChoose a pilot process and build the Decision Layer.
10-15Foundation in placeFormalise governance. Involve the Works Council.
5-9Catching up neededPrioritise AI literacy and inventory.
0-4Action requiredStart immediately. EU AI Act deadlines are running.
Investment Rule (McKinsey 2024)

EUR 1 in technology = EUR 4-5 in processes, governance, change management.

Technology15-20%
Process Design30-35%
Governance20-25%
Change Management20-25%

7 — Next Steps

The 90-Day Plan

MonthFocusOutcome
1InventoryAI overview, governance ownership, Works Council informed, pilot process identified
2DesignWorkflow audit, H/R/A classification, thresholds, draft framework Works Agreement
3PilotDecision Layer built, parallel operation, measurement after 4-6 weeks
Consultation

We will show you the Decision Layer applied to your own HR processes.

30 minutes, free of charge, no obligation.

Bert Gogolin - Managing Director, Gosign GmbH

Analyze your HR process: www.gosign.de/en/contact

Web: www.gosign.de