- Purpose, minimization, and privacy
- Define why each field and observation is needed, collect the minimum, separate sensitive and unrelated data, preserve provenance and correction, restrict reuse and sharing, govern monitoring explicitly, review providers, and retain or delete under approved policy.
- Accessibility and accommodation
- Provide accessible channels and content, test with varied assistive technologies and users, avoid treating disability effects as poor ability or engagement, make accommodation routes clear, support alternatives, and keep individualized decisions with qualified people.
- Job relevance and fairness
- Tie any assessment or recommendation to a defined purpose and relevant evidence, validate it for the actual use and population, examine errors and outcomes across relevant groups, seek less harmful alternatives, monitor change, and preserve independent review.
- Explanation and contestability
- Tell affected people when automation materially supports a process where required, identify the authoritative policy and evidence, distinguish human and system roles, explain the decision in usable language, and provide timely correction, appeal, grievance, or representation routes.
- Identity, access, and separation
- Verify applicant, worker, manager, reviewer, administrator, and service identity; grant only current purpose-specific access; separate sensitive roles and bulk export; prevent self-approval or hidden delegation; and record privileged action independently.
- Security, vendors, and monitoring
- Treat resumes, forms, messages, and imported content as untrusted data, isolate them from instructions, validate output and typed actions, protect credentials and exports, test vendor changes, detect misuse, and suspend the workflow when control or outcome evidence is missing.