EU AI Act use-case guide · Last verified 2026-01-15High risk

EU AI Act for Worker activity tracker (keystroke/mouse) in Human Resources & Recruitment

Granular keystroke/mouse tracking raises proportionality concerns and triggers Annex III §4 worker-management obligations.

Preliminary risk score 82/100Annex III, §4Preliminary summary · Not legal advice
worker activity trackerkeystroke monitoring AIproductivity scoring AI Actworkplace monitoring FRIAAnnex III §4 worker

Risk level

Worker activity tracker (keystroke/mouse) maps to a high-risk Annex III category, so the obligations below apply in full.

Annex III anchor

Annex III, §4

Score basis

A preliminary 82/100 based on the type of decision the system influences and how it is deployed in Human Resources & Recruitment.

Provider obligations

What the provider (developer) must do

Art. 10

Data governance over behavioural logs

EUR-Lex
Art. 13

Transparent documentation for deployers

EUR-Lex

Deployer obligations

What you must do as the deployer

Art. 27

Workers' representative consultation via FRIA

EUR-Lex
Art. 26

Documented necessity and proportionality

EUR-Lex

Deployment

How Worker activity tracker (keystroke/mouse) shows up in Human Resources & Recruitment

Typical contexts

Back-office productivity analyticsBPO quality and throughput scoring

Signals it's in play

  • Keystroke logging
  • Mouse metrics
  • Continuous monitoring

Recommendations

  • Aggregate metrics rather than per-action
  • Worker and union notification
  • Disciplinary-policy transparency

Watch-outs

  • Inferred off-task time = disciplinary input
  • Disability-related false positives
  • Cross-border worker-data transfers

FAQ

EU AI Act questions about Worker activity tracker (keystroke/mouse)

Is Worker activity tracker (keystroke/mouse) high-risk under the EU AI Act?

Worker activity tracker (keystroke/mouse) maps to Annex III, §4, which the EU AI Act treats as high-risk. In practice it is assessed as High risk, and the obligations below apply to providers and deployers.

Which EU AI Act articles apply to Worker activity tracker (keystroke/mouse)?

The obligations that typically apply are Art. 10 — data governance over behavioural logs; Art. 13 — transparent documentation for deployers; Art. 27 — workers' representative consultation via FRIA; Art. 26 — documented necessity and proportionality. Providers (developers) carry the technical duties; deployers (operators) carry the use, oversight, and transparency duties.

Who is responsible — the provider or the deployer of Worker activity tracker (keystroke/mouse)?

Both. Providers owe the technical obligations such as Art. 10, Art. 13. Deployers owe Art. 27, Art. 26. The split matters for procurement and vendor agreements in Human Resources & Recruitment.

What should you watch out for with Worker activity tracker (keystroke/mouse)?

Common failure modes include: Inferred off-task time = disciplinary input; Disability-related false positives; Cross-border worker-data transfers. Mitigations typically start with Aggregate metrics rather than per-action and Worker and union notification.

Where does Worker activity tracker (keystroke/mouse) typically appear in Human Resources & Recruitment?

Typical deployment contexts include Back-office productivity analytics and BPO quality and throughput scoring. Before deploying, confirm whether the specific use triggers the high-risk obligations listed above.

Sources

Citations & further reading

Related

More AI use cases in Human Resources & Recruitment

High risk84/100

AI hiring assistant

Screens, ranks, or recommends candidates during recruitment.

Read the guide
Limited risk38/100

Customer support chatbot

Automates customer conversations and support triage.

Read the guide
High risk79/100

Employee monitoring AI

Tracks productivity, behavior, sentiment, or performance at work.

Read the guide
Prohibited risk96/100

Biometric identification

Identifies or verifies people using biometric characteristics.

Read the guide
High risk71/100

AI resume parser

Parses unstructured CVs/resumes into structured candidate profiles.

Read the guide
High risk88/100

Automated CV screening

End-to-end reject/advance decisions on CVs without human review.

Read the guide
Limited risk42/100

AI recruitment chatbot

Conversational AI that interacts with job candidates during sourcing.

Read the guide
Prohibited risk92/100

Emotion recognition in the workplace

Detects or infers worker emotions for HR decisions.

Read the guide
High risk87/100

AI video interview assessment

Analyses video interviews for engagement, confidence, or fit.

Read the guide
High risk60/100

Biometric access control (workforce)

Employee or patient biometric authentication for premises or systems.

Read the guide
Limited risk55/100

AI voice cloning

Creates synthetic voice audio from recordings of a real speaker.

Read the guide
Limited risk48/100

Synthetic recruiter avatar

Synthetic video avatars used to conduct or appear in recruitment.

Read the guide
Limited risk47/100

AI on-call staff rostering

Allocates on-call shifts to clinical or operational staff based on demand/availability.

Read the guide
High risk70/100

AI warehouse worker routing

Optimises pick-and-pack routes per worker in real time.

Read the guide
High risk78/100

AI content moderation

AI that flags, removes, or ranks user-generated content.

Read the guide
Limited risk65/100

Deepfake content generation

Creates synthetic media that can convincingly depict real or synthetic persons.

Read the guide
Limited risk46/100

AI vendor credentialing

Onboarding AI that scores vendor documents, KYB data, and risk signals.

Read the guide
Limited risk35/100

AI document summarisation

Generates concise summaries of long regulatory or contractual documents.

Read the guide

Explore

More industry guides

Describe your exact system, get a personalised read

The guide above is a general baseline for Worker activity tracker (keystroke/mouse). The free Risk Scanner maps your specific implementation and surfaces hidden compliance blind spots.

Open the Risk Scanner

Preliminary EU AI Act clarity summary. Not legal advice.