What do I need to know legally about compliance cockpit and governance layer for the recruiting portal?

In the DACH context, GDPR, national employee data protection rules and the General Equal Treatment Act (AGG) must be considered together. Recommendation: for compliance cockpit and governance layer for the recruiting portal, establish fixed deletion periods, role-based access rights and audit logs. In practice: example 2 -- review cycle with audit log, KPI tracking and escalation path. Limitation: overly generic rules without role or legal context reduce quality. (Sources: EU AI Act Framework, NIST AI Risk Management Framework)