How do I implement AI governance and recruiting automation: audit and documentation logic in practice?

In the DACH context, GDPR, national employee data protection rules and the General Equal Treatment Act (AGG) must be considered together. Example 2: review cycle with audit log, KPI tracking and escalation path. Note: overly generic rules without role or legal context reduce quality. (Evidence: EU AI Act Framework, NIST AI Risk Management Framework)