What sources does Taxxa search?

Taxxa searches a continuously updated collection of more than one million pages from tax authorities, government publications, legislation and case law across the European jurisdictions it covers. Every response cites the underlying material, so a professional can inspect the rule, its jurisdiction and whether it is current before relying on the result.

Can Taxxa work with a team’s own documents?

Yes. Research can combine the public knowledge base with a team’s own PDF, DOCX, CSV and TXT files in one workspace. That makes it possible to compare a client document with the relevant guidance, trace a conclusion to its source and prepare a draft without losing the evidence that supports it.

Who is Taxxa built for?

Accountants, auditors, tax advisors, payroll specialists, bookkeepers and advisory teams working across European jurisdictions. Shared workspaces keep research available to colleagues, and citations make review easier.

Where is customer data stored, and is it used to train models?

Customer data stays in the European Union and is never used to train language models.

Does Taxxa replace professional judgement?

No. Taxxa is a research and drafting workspace. It helps professionals reach an informed starting point faster; the professional still reviews the evidence and makes the final decision. It does not file returns, post bookkeeping entries or give legal advice.

DenmarkDatatilsynet

EDPB picks AI hiring decisions for 2027 joint enforcement sweep

Datatilsynet will join the 2027 coordinated checks on automated and AI-driven hiring decisions; EDPB also gave a positive opinion on the first review of the South Korea adequacy decision.

By Taxxa AI OyPublished 11 November 2026

IT, Cybersecurity & Data

Industry: Across industries

At its meeting on 10 November 2026, Det Europæiske Databeskyttelsesråd (EDPB) chose the topic for the 2027 coordinated enforcement action under the Coordinated Enforcement Framework (CEF)Datatilsynet: automated decisions, including AI-driven automated decisions, in recruitmentDatatilsynet. EDPB adopts the topic and the common questionnaireDatatilsynet, while each national supervisory authority organises its own national investigationDatatilsynet. Datatilsynet will take part in the 2027 actionDatatilsynet and will soon begin organising the Danish investigation.

The CEF is EDPB's annual joint enforcement exercise built on that division of labour: EDPB sets one topic and the common questionnaire, and each participating authority carries out its own national investigation. More specifically, the 2027 action will focus on enforcement of the right not to be subject to decisions based solely on automated processing and the related right of access, in connection with automated candidate-screening tools including AI-driven onesEuropa. DPAs join the action voluntarily in the coming weeks, and the action itself launches in the course of 2027Europa.

The sweep therefore puts hiring practices that rely on automated screening, ranking or shortlisting tools, including AI-driven ones, under coordinated scrutiny. Employers and recruiters that use such tools to select among job applicants should use the lead time to check how their tools reach decisions, what human review stands behind them, and what candidates are told about the process. Danish employers using these techniques fall within the investigation Datatilsynet will now prepareDatatilsynet.

Separately, EDPB adopted its statement on the first review of the functioning of the adequacy decision for the Republic of KoreaEuropa. EDPB welcomes the amendments to Korean data protection legislation: they have increased the protection of individuals while facilitating processing by controllers, maintaining protection essentially equivalent to the GDPREuropa. The amendments include a new right to refuse an automated decision, including by AI systems, or to request an explanation where the decision significantly affects rights or obligations, alongside stronger enforcement and sanctioning powers for the Korean authority PIPC. The Commission's report of 23 July 2026 on the first review concluded that Korea continues to ensure an adequate level of protectionEuropa, and EDPB agreed with the Commission's proposal to review the adequacy decision every four years. Controllers transferring personal data to Korea therefore continue to rely on Commission Implementing Decision (EU) 2022/254Europa, under which transfers to entities covered by the Personal Information Protection Act may take place without any further authorisationEuropa.

Legal basis: Regulation (EU) 2016/679, in particular Article 45 on adequacy decisions, applied for Korea through Commission Implementing Decision (EU) 2022/254Europa, and the EDPB Coordinated Enforcement Framework under which EDPB sets the annual topic and questionnaire while the national supervisory authorities run the national investigations.

If you use automated or AI-assisted tools to screen job applicants, document the decision logic, the human involvement and the information given to candidates now, ahead of the 2027 coordinated checks.

Sources