AI in scheduling, planning and payroll: task allocation is high-risk
AI that assigns shifts, plans capacity or calculates pay falls under Annex III once it allocates tasks based on behaviour or traits. Beyond the AI Act, working-time rules, schedule predictability and the GDPR apply — plus the risk that dynamic scheduling disadvantages certain groups.
Short answer: AI that builds rosters, plans capacity or calculates pay looks operational and neutral — but as soon as it allocates tasks or shifts based on behaviour or traits, it falls under Annex III of the AI Act as high-risk. Beyond that, working-time rules, schedule-predictability requirements and the GDPR apply. The core risk: dynamic scheduling that systematically disadvantages certain groups.
Why scheduling can be high-risk
Annex III names task allocation based on behaviour or personal traits explicitly. A scheduling system that distributes shifts by "availability score", productivity or preferences co-decides someone's income and work-life balance. That is no longer neutral logistics but a decision about people — with human oversight as a requirement.
The fairness risk
Dynamic, "optimised" rosters can unintentionally reinforce patterns: those often available get the best hours; those with caring duties or a disability fall back. An efficiency tool thus shifts into indirect discrimination. Just-in-time scheduling without predictability also touches employment law.
Working time and predictability
Beyond the AI Act, the ordinary rules apply: maximum working hours, rest periods and — for many workers — a right to reasonably predictable working time. An algorithm that lets rosters fluctuate does not release the employer from those norms.
The GDPR and transparency
Scheduling based on personal data (availability, performance, location) requires a basis, transparency and data minimisation. Workers have an interest in understanding how their roster comes about; involve the works council where needed.
What to do
- Determine whether the system allocates tasks/shifts based on behaviour or traits — then it is high-risk.
- Secure human oversight and a route to raise an unreasonable roster.
- Monitor for fairness: do groups systematically get better or worse hours?
- Respect working time and predictability, also with dynamic scheduling.
- Be transparent about the logic and involve the works council.
Scheduling and payroll feel like arithmetic but in practice distribute opportunity and income. An algorithm that does that falls under the same protection as any other decision about people.
Sources
- https://eur-lex.europa.eu/eli/reg/2024/1689/oj
Regulation (EU) 2024/1689 (AI Act): Annex III classifies task allocation based on behaviour/traits as high-risk. - https://eur-lex.europa.eu/eli/reg/2016/679/oj
Regulation (EU) 2016/679 (GDPR): basis and transparency for automated scheduling based on personal data.
Read next
AI in onboarding and internal mobility: where is the line?
Talent marketplaces, skills matching and career paths with AI seem neutral, but they reach the high-risk line as soon as they steer promotion or progression decisions (Annex III, point 4). Then the AI Act, GDPR, transparency and equal opportunity apply internally too.
AI in housing allocation: access to essential services
AI that decides who gets access to housing strikes at the core of the high-risk regime. Annex III of the AI Act covers access to essential private and public services; on top of that, the GDPR prohibits discrimination and sets demands on automated decisions.
AI financial fraud detection: the Annex III carve-out
AI that detects financial fraud is expressly carved out of the high-risk classification for credit scoring in Annex III. The carve-out is narrow: it covers genuine fraud detection, not credit assessment under a fraud label. The GDPR and governance still apply.