Licensing recruitment agency data to AI buyers: what staffing firms can offer

What do AI buyers want from recruitment agencies?

Records that show how recruitment work gets done, not lists of people. Scale AI lists "Staffing & Recruiting" among its industries of interest¹, and Ventra lists staffing and call centres among the industries labs are buying from².

Scale says AI companies want to improve their models for "corporate personas such as marketers or financiers"¹. In an agency, our reading is that the equivalent persona is the consultant or resourcer working a vacancy from brief to placement. Mercor says a company's internal records capture how it actually operates, which public and synthetic data cannot replicate⁵.

So the valuable material is the working history: intake and briefing notes, how a specification changed, stage-by-stage pipeline movement, consultant email and chat about the process, and the procedures behind compliance checks.

Size matters too. micro1 looks for 30 or more full-time employees³, Scale prefers 40 or more¹, Ventra wants 30 or more in the US, UK or Canada², and Mode's referral programme looks for 50 or more staff outside legal, accounting, medical and finance⁴.

Some buyers also work in hiring: micro1's site recruits experts ("Join as an expert")⁷, and UsagePricing describes Mercor as an "AI talent and data marketplace"⁶. Scale says AI companies are not seeking to compete with the businesses whose data they use¹. Weigh any overlap with your own business, and limit the permitted use in the licence; see our licence terms checklist.

Why does candidate data need special care?

Candidate records are personal data by design, some are special category or criminal offence data, and agencies in Great Britain have a specific statutory confidentiality rule about work-seekers.

• The 2003 Conduct Regulations. Regulation 28 says an agency or employment business "may not disclose information relating to a work-seeker, without the prior consent of that work-seeker", except to provide work-finding services, for legal proceedings, or to a professional body the work-seeker belongs to⁸. Licensing to an AI buyer is not on that list. Whether effectively anonymised records still count as "information relating to a work-seeker" is a question for your solicitor. The rule extends to England, Wales and Scotland⁸. Northern Ireland has its own 2005 Regulations, whose regulation 28 sets the same rule with the same three exceptions²⁰.
• Required records. Agencies must keep each work-seeker's name, address, date of birth if under 22, training, experience, qualifications, copies of evidence and the hirers they were introduced to¹⁰, for at least a year after last providing services⁹. These are among the records that must not leave.
• Special category data. Article 9 covers, among other things, data revealing racial or ethnic origin, religious beliefs or trade union membership, and data concerning health, sex life or sexual orientation¹¹. Diversity monitoring, sickness records and adjustment requests fall here.
• Criminal records data. Article 10 allows processing only under official authority or where domestic law authorises it¹². DBS results stay out.
• Opinions about people. Interview notes and references are personal data about named individuals, and often about referees too.

What can be licensed once candidate details are removed?

Process records: how vacancies are taken, specified, worked and filled. Anything that describes a particular candidate stays out, and anything in between needs care.

Removing names is not enough. The ICO says pseudonymised data "is still personal data"¹⁵; data is anonymous only when the risk of identification is "sufficiently remote", judged by the means reasonably likely to be used and a "motivated intruder" test¹⁶. Recruitment records carry a particular risk: a niche role, a town and a start date can identify one person even with every name removed, for example the only treasury director placed in one city in one month. Free-text notes are the hardest to clean.

Applying anonymisation also "counts as processing", so you need a lawful basis, a defined purpose and information for the people concerned¹⁵. We prefer candidate details removed before records leave your systems; if a buyer removes personal data after transfer, we tell you in writing first and your solicitor confirms the transfer route. Our anonymisation standard sets out how we approach this, and consultants' own messages are covered in our guide to Slack, Teams and email archives.

What about client briefs and confidentiality?

Briefs, salary bands and hiring plans belong partly to your clients and are often covered by confidentiality terms. Check every client's terms before any brief is considered for licensing.

• Read your terms of business and any supplier terms your larger clients imposed. Many restrict how information about their hiring may be used.
• Check who wrote it. Copyright in a work made by an employee in the course of employment belongs first to the employer, unless agreed otherwise¹⁹. A job description drafted by your client's staff is likely to be your client's work; one your consultants wrote is likely to be yours.
• Buyers recognise the limit. Polyshares says its licence "does not cover what you hold on behalf of your own clients"¹⁸.
• Treat retained and executive search as sensitive. A confidential search can reveal a client's restructuring or succession plans, even with names removed.

Do candidates need to be told?

Usually, yes. UK GDPR requires a controller that intends to process personal data for a new purpose to give people information about it before doing so^13,14, and the ICO says the anonymisation step itself needs a defined purpose and information for the people concerned¹⁵.

1. Update your candidate privacy notice before any records are prepared.
2. Agree the lawful basis with your solicitor and record the reasoning.
3. Plan for past candidates. A narrow exception exists for research, archiving and statistical purposes with specific safeguards¹³; do not assume it covers commercial licensing.
4. Tell your own consultants. Their email and chat are in scope too.
5. Keep a record of what was decided, when and why.

The wider legal picture is in our UK law guide. This page is not legal advice.

How many UK agencies could qualify?

The ONS counts 3,445 UK enterprises in employment activities (SIC division 78) with 20 to 249 employees: 1,705 with 20 to 49, 1,155 with 50 to 99 and 585 with 100 to 249. Another 455 have 250 or more¹⁷.

These are VAT or PAYE based enterprises, published on 24 September 2026, with counts rounded to the nearest five¹⁷. The ONS does not split the 20 to 49 band, so by our arithmetic the 1,740 agencies with 50 to 249 employees clear every published size floor (30 at micro1 and Ventra, 40 preferred at Scale), and some of the 1,705 smaller ones will too^1,2,3.

One caution for employment businesses: buyers state their floors in employees (micro1 asks for 30 or more full-time employees³), so ask each buyer whether temporary workers on your payroll count before relying on your total headcount.

Find out what your agency's records could be worth on a free 30-minute call, with no data leaving your systems. Our sectors overview covers other industries, and how we are paid explains why the valuation costs you nothing.

Related sectors: licensing law firm data for AI training and licensing logistics data to AI buyers.