AI Regulatory Intelligence — by YRproject

factual analysis · traceable to primary sources

Explainer

AI in scheduling, planning and payroll: task allocation is high-risk

Adopted 2026-06-21 · ≈ 2 min read · Dirk Baaijen

AI that assigns shifts, plans capacity or calculates pay falls under Annex III once it allocates tasks based on behaviour or traits. Beyond the AI Act, working-time rules, schedule predictability and the GDPR apply — plus the risk that dynamic scheduling disadvantages certain groups.

Short answer: AI that builds rosters, plans capacity or calculates pay looks operational and neutral — but as soon as it allocates tasks or shifts based on behaviour or traits, it falls under Annex III of the AI Act as high-risk. Beyond that, working-time rules, schedule-predictability requirements and the GDPR apply. The core risk: dynamic scheduling that systematically disadvantages certain groups.

Why scheduling can be high-risk

Annex III names task allocation based on behaviour or personal traits explicitly. A scheduling system that distributes shifts by "availability score", productivity or preferences co-decides someone's income and work-life balance. That is no longer neutral logistics but a decision about people — with human oversight as a requirement.

The fairness risk

Dynamic, "optimised" rosters can unintentionally reinforce patterns: those often available get the best hours; those with caring duties or a disability fall back. An efficiency tool thus shifts into indirect discrimination. Just-in-time scheduling without predictability also touches employment law.

Working time and predictability

Beyond the AI Act, the ordinary rules apply: maximum working hours, rest periods and — for many workers — a right to reasonably predictable working time. An algorithm that lets rosters fluctuate does not release the employer from those norms.

The GDPR and transparency

Scheduling based on personal data (availability, performance, location) requires a basis, transparency and data minimisation. Workers have an interest in understanding how their roster comes about; involve the works council where needed.

What to do

  • Determine whether the system allocates tasks/shifts based on behaviour or traits — then it is high-risk.
  • Secure human oversight and a route to raise an unreasonable roster.
  • Monitor for fairness: do groups systematically get better or worse hours?
  • Respect working time and predictability, also with dynamic scheduling.
  • Be transparent about the logic and involve the works council.

Scheduling and payroll feel like arithmetic but in practice distribute opportunity and income. An algorithm that does that falls under the same protection as any other decision about people.

Sources

  1. https://eur-lex.europa.eu/eli/reg/2024/1689/oj
    Regulation (EU) 2024/1689 (AI Act): Annex III classifies task allocation based on behaviour/traits as high-risk.
  2. https://eur-lex.europa.eu/eli/reg/2016/679/oj
    Regulation (EU) 2016/679 (GDPR): basis and transparency for automated scheduling based on personal data.

Share on LinkedIn

Read next

A

AI in onboarding and internal mobility: where is the line?

Talent marketplaces, skills matching and career paths with AI seem neutral, but they reach the high-risk line as soon as they steer promotion or progression decisions (Annex III, point 4). Then the AI Act, GDPR, transparency and equal opportunity apply internally too.

U

AI in housing allocation: access to essential services

AI that decides who gets access to housing strikes at the core of the high-risk regime. Annex III of the AI Act covers access to essential private and public services; on top of that, the GDPR prohibits discrimination and sets demands on automated decisions.

U

AI financial fraud detection: the Annex III carve-out

AI that detects financial fraud is expressly carved out of the high-risk classification for credit scoring in Annex III. The carve-out is narrow: it covers genuine fraud detection, not credit assessment under a fraud label. The GDPR and governance still apply.

Dirk Baaijen

About this knowledge base

Compiled and maintained by YRproject — programme and project direction at the intersection of digital transformation, AI and regulation. Every factual claim is traceable to its primary source. YRproject is led by Dirk Baaijen About & method →

A project or programme? Work with YRproject →

The monthly briefing

AI regulation in five minutes: what changed, what is coming and what it means. No spam, unsubscribe anytime.

Your address is used for this only and stored on our own servers.