What the Regulation names
Annex III names AI systems for recruiting or selecting persons, in particular for placing targeted job advertisements [1]. Systems in Annex III are considered high-risk [2]; for HR those rules start on 2 December 2027 [3].
Who has the duties
The duties for use rest on the deployer: whoever uses the system under their own authority [4]. If you yourself deploy an AI tool that determines who gets to see your vacancy, that is you. If you choose a target group on a job platform and the platform distributes the advertisement with its own AI, you use that function for your own recruitment and you may also be a deployer yourself; the platform is usually the provider. Assume, therefore, that you have duties of your own, and ask the platform what information it supplies for that.
An exception with a limit
An Annex III system is not high-risk if it does not pose a significant risk of harm, for example because it does not materially influence the outcome [5]. But a system that profiles persons is always high-risk [6]. Targeted advertisements that select people on their profile fall under that as a rule.
Already now: no distinction
Distinction on the ground of, among other things, sex, race or religion is prohibited when offering a position [7]. A target group that excludes certain groups can amount to that distinction, even if an algorithm makes the choice.