AI Recruitment and Data Privacy: A Legal Challenge