If there is any 'decision' being made with that screening, you can't run this with GDPR. You can't have the 'machine' make a life-impacting decision such as employing someone, there is no 'explainability', no re-do by a human. Someone with time to spare can ramp up your legal costs in court, and they won't have to pay a dime/cent even if they lose.. because GDPR (also the EUDPS's people will have a party on your expense).
Also considering that your 'AI' collects and processes, voice, name, PII, perhaps financial data, etc... good luck with the DPIA!
Also considering that your 'AI' collects and processes, voice, name, PII, perhaps financial data, etc... good luck with the DPIA!