There is no single “AI hiring law” in Canada. What actually governs an AI-screened application is a small stack of separate rules — a job-posting disclosure duty in Ontario, a different and earlier one in Québec, and ordinary privacy law over the applicant’s data — with nothing filling the gap federally.
Key takeaways
Ontario does not ban AI resume screening. As of publicly advertised job postings on or after January 1, 2026, it requires employers with 25 or more employees to include “a statement disclosing the employer’s use, if any, of artificial intelligence to screen, assess or select applicants for the position” in the posting itself. (Ontario, Requirements related to publicly advertised job postings) The bar for what that statement has to say is deliberately low: “it is not necessary to provide a detailed description of the artificial intelligence system or the employer’s use of the system… it is enough for the employer to state that artificial intelligence is used to screen, assess or select applicants.” The duty travels with the hiring process even when it is outsourced — “this requirement applies equally where the employer engages a third party (for example, a recruiting firm) to screen, assess or select applicants on their behalf,” and the employer keeps the responsibility for making sure it happens.
One nuance the guide draws out matters specifically for resume screening: it separates a “preliminary screening” from an “interview”. “A preliminary screening is generally an initial step in the recruitment process, taken by the employer to filter the applicant pool to arrive at a selection of candidates who are most qualified for the position” — which is exactly what an AI resume screen typically is. Because it is not an interview, the ESA’s separate duty to tell an interviewed applicant the outcome within 45 days does not attach to the screening step itself; only the disclosure-in-the-posting duty does. (same page)
Québec’s privacy regulator, the Commission d’accès à l’information, addresses AI in hiring directly and sets a different bar than Ontario’s. Its guidance states that the use of AI in a hiring process — for example to sort applications or evaluate the best candidates — “devrait être communiqué aux candidats dès le début du processus”, meaning it should be disclosed to candidates from the very start of the process, not only inside the job ad. (CAI Québec, guidance on recruitment and AI) Where the system produces a decision “exclusivement fondée sur un traitement automatisé” — the CAI’s own example is “le rejet automatique de certaines candidatures par un logiciel de tri”, the automatic rejection of certain applications by sorting software — the employer must notify the candidate no later than when it informs them of the decision, provide additional information, and offer the right to request a review. Before using such a system at all, the employer must complete a privacy impact assessment (évaluation des facteurs relatifs à la vie privée). Ontario has no equivalent pre-deployment assessment duty, and no automatic-decision notice-and-review right — the two provinces are not saying the same thing in different words.
Ontario and Québec both require telling people; neither forbids AI-assisted screening outright, and no federal statute says anything about AI in hiring — there is a real gap, not a hidden national standard. What does exist federally is a fairness principle, not a rule specific to hiring: Canada’s privacy commissioners warn that AI systems can produce outcomes “more likely to result in discriminatory outcomes based on race, gender, sexual orientation, disability, or other protected characteristics, particularly where they are used as part of an administrative decision-making process… or in highly impactful contexts such as health care, employment, education, policing, immigration, criminal justice, housing or access to finance.” (OPC, Principles for responsible, trustworthy and privacy-protective generative AI) That is a reason to test a screening tool for bias before relying on it, not a rule that tells an employer how.
Outside the two disclosure duties above, an AI-screened application is governed by ordinary Canadian privacy law, and that law has a real gap employers routinely misjudge. PIPEDA applies to personal information collected in the course of commercial activity, (OPC, PIPEDA overview) but its specific employee-information provisions apply fully only to employees of federally regulated employers — banks, airlines, telecommunications companies. For most provincially regulated Ontario businesses, employee records used strictly for employment purposes fall into what treadstonelaw’s own review calls “a genuine legal gap: no dedicated statute governs them the way PIPEDA governs customer data.” (Treadstone Law, Employee Privacy Law in Ontario for Employers) Whether that same gap extends to a job applicant — who is not yet an employee — is exactly the kind of specific-facts question neither source resolves cleanly, which is itself the honest answer: there is no dedicated Canadian statute written for AI-screened applicant data, only the general architecture above.
An Ontario employer with 40 staff and a Québec employer with 40 staff both adopt the same third-party resume-screening tool. The Ontario employer’s obligation is met by adding one sentence to the job posting stating that AI is used to screen applicants — nothing more is legally required at that stage, though the posting must still separately disclose compensation and vacancy status. The Québec employer has more to do before the first application ever arrives: complete a privacy impact assessment on the tool, and be ready to tell candidates about the AI use from the outset of the process rather than only in the ad. If either tool later rejects an application with no human involved at all, only the Québec employer is on the hook for the automatic-decision notice-and-review duty — Ontario’s rule is silent on that scenario entirely. Running one national hiring process across both provinces means meeting the stricter of the two, province by province, not picking one.
Yes. The rule applies equally where the employer engages a third party, such as a recruiting firm, to screen, assess or select applicants on its behalf — the employer keeps responsibility for making sure the disclosure appears.
Ontario’s job-posting disclosure duty does not apply below that threshold, counted as individual employees on the day the posting goes up, not full-time equivalents. General privacy law over the applicant’s data still applies regardless of size.
No. There is no federal statute governing AI use in hiring. The only two direct, binding disclosure rules found anywhere in this area are provincial — Ontario’s and Québec’s — and they are not the same rule.
Related: Ontario’s AI disclosure rule for job ads, in full, can staff be disciplined for using AI, and vetting an AI vendor’s own claims before you sign.
A short call is enough to map what a vendor actually claims against what Ontario or Québec requires you to disclose.
