The Email That Changed Everything
Last month, a Rekko user asked: "Will [ATS X] work if we hire in Germany and France?"
Standard answer: "Yes, GDPR compliant, data residency in EU."
But I dug deeper. Here's what actually matters:
- Germany: Betriebsrat (works council) approval required for any tracking system (even ATS candidate scoring)
- France: Works councils need 3-month notice before implementing candidate management software
- Netherlands: Right to explanation on algorithmic hiring decisions (scores on your ATS must be explainable)
- Italy: Data Protection Authority pre-approves processing of job candidate data
- Spain: Employee reps have veto power over hiring tech
Every major ATS claims "European compliance." Almost none handle Betriebsrat consent or works council requirements. Let me walk through what breaks---and which tools actually work.
Germany: The Betriebsrat Bottleneck
In Germany, if you have a works council (Betriebsrat), they must approve any system that processes employee or candidate data. This includes:
- ATSs (candidate screening, scoring)
- HRIS systems (performance data)
- Assessment tools (any AI evaluation)
- Background check services
- You can't just "turn on" a tool
- Approval timeline: 4--12 weeks (often longer if the works council wants to negotiate)
- The works council can modify, delay, or veto implementation
- Failure to get Betriebsrat approval = illegal processing, fines EUR50K+
From Rekko's audit of 137 tools:
| Tool | Betriebsrat Aware | DPA Required | Notes | |
|---|---|---|---|---|
| Recruitee | Yes | Yes | Explicitly mentions works council in docs | |
| Teamtailor | Yes | Yes | Swedish company, Nordic compliance-first | |
| Ashby | Partial | Yes | No explicit Betriebsrat language; contacts Gremium on demand | |
| Workable | No | Yes | Generic GDPR language; no works council acknowledgment | |
| Greenhouse | No | Yes | Enterprise-only; assumes client handles approval | |
| Lever | No | Yes | GDPR compliance, but silent on co-determination |
For a direct feature and compliance comparison between these two top DACH performers, see [Personio vs Teamtailor](/compare/personio-vs-teamtailor) and [Personio vs HiBob](/compare/personio-vs-hibob).
France: Works Council Notification (3 Months)
France requires advance notice before implementing new employee monitoring or data processing systems. Timeline:
- Month 1: Notify the works council in writing
- Month 1--3: Works council negotiates terms (can request modifications, delays)
- Month 3: Implementation allowed (if no resolution, employer can proceed with conditions)
This applies to:
- Candidate tracking (ATS)
- Time tracking
- Performance management systems
- Remote work monitoring
- Even certain analytics tools
Most don't. It's usually buried in "French Works Council" PDF documents that don't come up in a standard product tour.
What to do:- Use a Recruiter or Talent Manager with explicit French works council guidance (Recruitee, Teamtailor, Cezanne HR)
- Budget 3+ months for implementation
- Plan your hiring timeline backward from your works council notification
For a complete breakdown of works council requirements across Germany, France, and the Netherlands --- including Betriebsrat approval timelines and CSE consultation rules --- see [What Are Works Councils and Why Your HR Software Needs to Support Them](/blog/works-councils-hr-software-support).
Netherlands: Right to Explanation (AI Transparency)
Dutch labor law (and emerging EU AI Act rules) require that any algorithmic hiring decision must be explainable. If your ATS uses AI to score candidates, you must:
- Show the candidate how they were scored
- Explain which factors influenced their score
- Allow candidates to request human review
- Ashby: Transparency dashboard (why candidate passed/failed screening)
- Greenhouse: Custom scorecards (you define the factors, candidates see them)
- Recruitee: Flexible scoring, explainable by default
- Workable: Basic scoring, less granular explanation
- HireQuotient: No explicit transparency; AI scoring is opaque
Italy: Data Protection Authority Pre-Approval
Italy's DPA requires formal authorization for certain types of candidate data processing (especially if you plan to use the data later for other purposes like alumni networks or contract work).
This affects:
- Which data you can store after hiring (CVs, salary data, background checks)
- Whether you can share data with recruitment agencies or contractors
- How long you retain candidate records
Almost none. Most assume US-style data practices (keep everything, share with contractors, use for alumni marketing).
What to do:- Consult Italy's DPA guidance directly (not vendor claims)
- Use a DPA-compliant HRIS (Cezanne HR, Lucca, Bamboo HR)
- Document your legal basis for data retention
Spain: Works Committee Veto
Spain's labor law allows the works committee to negotiate (and potentially veto) implementation of hiring tech that affects workers' privacy or rights.
Similar to France, but with more union leverage. Timeline: 30 days notice, negotiation period, then implementation (unless union escalates).
The Real Problem
These aren't edge cases. They're the standard in countries where unions are strong and labor law is enforced.
But most US/UK-based ATSs treat "GDPR compliance" as a checkbox. A signed DPA and EU data center != Betriebsrat approval or works council notification.
What Rekko Does Differently
We audit tools against actual country requirements, not just GDPR claims. Our recommendation engine asks:
- "Which countries do you hire in?"
- "Do you have a works council?"
- "What's your timeline?"
- Then recommend tools that actually work in that context.
The 5 Countries That Break Most ATSs
- Germany (Betriebsrat approval)
- France (3-month works council notice)
- Netherlands (right to explanation, AI transparency)
- Italy (DPA pre-authorization)
- Spain (works committee negotiation)
If you hire in any of these: verify your ATS explicitly handles the requirement before signing a contract. "GDPR-compliant" is not enough.
For a step-by-step framework to evaluate ATS tools against works council and GDPR requirements, see the [ATS Buyer's Guide for EU HR Teams](/blog/how-to-choose-ats-buyers-guide-eu).
For a GDPR-specific compliance checklist to run through with your legal team before signing any ATS contract, see the [GDPR Compliance Checklist for HR Teams](/blog/gdpr-compliance-checklist-hr-cloud-recruitment).
Looking for the right tool? [Compare 137+ HR tools](https://rekko.polsia.app) --- free, with EU compliance data.