AI as the Default First Screen: What Australian Employers Must Get Right in 2027

For most of the last two decades the first thing that happened to an Australian job application was nothing. It landed in an inbox or an applicant tracking system and waited. The AI first screen changes the shape of that opening step: instead of a resume sitting in a queue, the candidate has a structured conversation or completes a short task, and gets a decision far sooner. This article is about running that step properly in Australia, which means consent, notice, record-keeping, and a worked answer for the candidate who says no.
One boundary first. This is not an article about whether automated screening is biased or how to keep a human in the loop over its outputs. That ground is already covered in our piece on AI screening: speed versus fairness, and the argument there stands. What follows assumes you have decided to run an automated first step and need to operate it lawfully and decently.
What replaces the resume drop
The replacement is not one technology. In practice Australian employers are running three variants, and they carry different obligations.
- Conversational AI screening - Format: a chat or voice exchange that asks role-specific questions and follows up on the answers; Typical use: high volume roles where the same six questions were previously asked by phone
- One-way interview - Format: the candidate records answers to set questions with no interviewer present, scored later; Typical use: shortlisting where scheduling was the bottleneck
- Automated shortlisting - Format: no candidate-facing step at all, the system ranks or filters applications against the brief; Typical use: large applicant volumes against a well-specified role
The distinction matters because the first two are things a candidate experiences and can decline, while the third often happens without them knowing. Our guidance on asynchronous interview screening covers the mechanics of running the one-way format well, so this article stays on the duties that attach to it.
Why candidates often prefer it
The assumption that candidates resent an automated first step deserves examination. A structured first screen gives the same questions to everyone, removes the phone-tag delay, and lets someone complete the step at 9pm after their current job. Against the realistic alternative, which is often a resume nobody opens, a decision in two days beats silence for three weeks. We have no Australian survey measuring that preference, so take it as a reasoned argument rather than a measured finding.
The preference is conditional, though, and the conditions are the point of this article. It holds when the candidate knows the step is automated, knows what is being collected, and has somewhere to go if they would rather not do it.
The Australian obligations you cannot skip
Automated decision transparency, in force since December 2026
Australian Privacy Principles 1.7 to 1.9, introduced by the Privacy and Other Legislation Amendment Act 2024, commenced on 10 December 2026. Where an entity has arranged for a computer program to make, or do something substantially and directly related to making, a decision that could reasonably be expected to significantly affect an individual's rights or interests, and personal information is used in that program, the entity's privacy policy must say so.
The policy has to describe the kinds of personal information used, the kinds of decisions made solely by the program, and the kinds of decisions where the program does something substantially and directly related to the decision. Rejecting or ranking a job application is a decision affecting a person's interests on any ordinary reading. The consequence for 2027 is that your careers page privacy wording, not just your marketing privacy policy, is now a compliance surface. Our Privacy Act hiring changes rundown covers the wider reform package this sits in.
Notice at the point of collection
Separate from the policy obligation, APP 5 requires notice when you collect personal information. For an automated first screen that means telling candidates, at the point they start it, that the step is automated, what it collects, who sees the output and how long it is kept. A line buried in a policy nobody opens is not the same as notice where the collection happens.
The employee records exemption does not help you here
This is the most common misreading we see. The employee records exemption under section 7B(3) of the Privacy Act covers an employer's handling of records about its own current and former employees. The OAIC's position is explicit that it does not extend to future employment relationships, so it does not cover personal information collected about prospective employees who are not subsequently employed. Unsuccessful applicants are the majority of everyone who touches your first screen, and their data sits under the Australian Privacy Principles in full. The OAIC also notes the exemption is unlikely to apply at all to organisations providing recruitment services under contract.
Record-keeping: what to retain and for how long
Two pressures pull in opposite directions. Transparency and the ability to answer a complaint argue for keeping the screen output and the reason for the outcome. Collection minimisation and retention limits argue against hoarding video and audio of thousands of unsuccessful applicants indefinitely. A defensible position for a 200-plus employee employer looks like this.
- Decision record - Keep: the questions asked, the score or outcome, the configuration in force on the day; Why: this is what lets you explain an outcome later
- Raw recordings - Keep: a short, written, published window; Why: the highest sensitivity and lowest ongoing value of anything you hold
- Decline and alternative-path records - Keep: the request and what you did about it; Why: evidence the alternative is real rather than theoretical
Write the periods down and apply them automatically. A retention rule enforced by a calendar reminder is not a retention rule. For the detail underneath all of this, our guide to AI recruitment privacy in Australia goes further than a single article can.
When a candidate declines the AI screen
Every employer running an automated first step needs an answer to this before it happens, because deciding case by case produces inconsistency that is far harder to defend than any policy would have been.
A workable approach has four parts. Offer a stated alternative, normally a short structured phone screen against the same questions, so the comparison stays fair. Name the person who handles declines, because a request that routes to a no-reply inbox is a refusal with extra steps. Hold the assessment standard constant: the alternative path changes the medium, not the bar. And record the decline and the outcome, so you can tell whether the automated step is quietly filtering a particular group of people who would rather avoid it.
Expect the volume to be low. The cost of being unable to answer is not low, which is why this is worth half a page of written process rather than an improvised reply.
A short implementation order
If you are standing this up in the next two quarters, the sequence that avoids rework is: privacy policy wording for automated decisions first, then the collection notice at the start of the screen, then the decline path and its owner, then retention periods, and only then turn the tool on for a single role family. Running the pilot before the paperwork means the first candidates go through a process you cannot yet describe.
Frequently asked questions
Do we need consent to use an AI first screen in Australia? The more useful framing is notice and transparency rather than consent alone. You owe candidates an APP 5 collection notice at the point of collection, and since 10 December 2026 your privacy policy must describe qualifying automated decision-making. Whether you also seek explicit consent is a design choice on top of those duties, and specific advice should come from your own legal adviser.
Does the employee records exemption cover job applicants? No. The OAIC's position is that the exemption does not apply to future employment relationships, including the personal information of applicants who are not subsequently employed. Treat candidate data as fully covered by the Australian Privacy Principles.
Can we reject a candidate solely on an automated screen? Nothing in the transparency obligation prohibits it, but it is the scenario that most needs a written decision record and a working alternative path. The fairness and oversight argument for keeping a human in that decision is made in our separate AI screening article.
How long should we keep one-way interview recordings? There is no single prescribed period for candidate recordings. Set the shortest window that serves a stated purpose, publish it, and enforce it automatically rather than by memory.
What if a candidate asks how the screen scored them? Have an answer ready that describes the questions, what the step assessed and who reviewed the outcome. This is the practical reason to keep a decision record rather than only a final score.
Run The AI First Screen On Written Rules
The automated first step is not the controversial part of hiring in 2027. The controversial part is running one without being able to say what it collects, what it decided, how long you keep it and what happens when someone declines. Those four answers are a page of writing, and they are the difference between a defensible first screen and an expensive one.
Stop hiring by intuition.
Automate reference checks and skills assessments with Righteo. Get honest, structured insights on every candidate — faster and fairer. Trusted by 1,200+ Australian businesses.