The core message is this. AI hiring tools are now a documented legal risk, the liability for how they behave can land on the employer who uses them and not just the vendor who sold them, and a small business using an AI resume screener needs a few specific protections in place before the next hire. The good news is that those protections are cheap and mostly procedural. The bad news is that almost no small business has them yet, and the cases making this real are already in court.
This is not a reason to abandon AI in hiring. It is a reason to use it the way you would use any tool that can create legal exposure, with eyes open and guardrails on. The businesses that get hurt will be the ones who bought an AI screener to save time and assumed the vendor absorbed all the risk. The vendor did not.
Two 2026 lawsuits, against Eightfold AI and Workday, establish that AI hiring tools carry real legal risk and that the employer using them can be liable, not just the vendor. If your small business uses AI to screen applicants, you need human review of AI decisions, candidate notice, documented vendor due diligence, and awareness of FCRA and state law. Put those in place before your next hire.
Why a small business should care
There is a comfortable assumption among small employers that hiring lawsuits are a big-company problem, and that buying an AI tool from a reputable vendor shifts any risk to that vendor. Both halves of that assumption are wrong in 2026, and these two cases are why.
AI screening tools are now cheap and common enough that small businesses use them routinely, often without realising it, because the screening is built into an applicant tracking system or a hiring platform they adopted for other reasons. If your hiring software ranks candidates, scores resumes, or filters applicants by an algorithm before a human looks, you are using an AI hiring tool, and the legal questions these lawsuits raise apply to you.
And the liability does not conveniently stop at the vendor. The Workday case specifically advanced a theory that the AI tool can act as an agent of the employer, which means the employer can be answerable for what the tool does. A small business cannot point at the software company and walk away. If the tool you chose screens out a protected group, you chose the tool. That is the exposure, and it is why a five-person company should read these cases as carefully as a five-thousand-person one.
The Eightfold case and the FCRA trigger
On January 20, 2026, job applicants filed a proposed class action against Eightfold AI in California state court. The allegations describe how these tools work and why that creates legal exposure. According to the complaint, Eightfold scraped personal data on more than a billion workers, scored job applicants on a zero-to-five scale, and discarded low-ranked candidates before a human being ever saw their applications.
The legal theory is the part small businesses should understand. The suit alleges the tool violates the federal Fair Credit Reporting Act and California's Investigative Consumer Reporting Agencies Act, by compiling sensitive individualised information on applicants from sources like LinkedIn profiles, publications, and job history, and thereby generating what amounts to a consumer report, without the disclosure, authorisation, and notification those laws require.
If that theory succeeds, it reaches far beyond Eightfold. The Fair Credit Reporting Act has been around for decades and has well-established requirements: when a consumer report is used in an employment decision, the applicant must be told, must authorise it, and must get specific notices if they are rejected because of it. The argument that AI screening tools generate consumer reports would pull a huge range of common hiring tools, and the employers using them, into those requirements. As one employment law analysis put it, this lawsuit tests whether AI hiring tools trigger FCRA compliance, and that question matters to every employer using one, not just to Eightfold.
The Workday case and employer liability
The Workday litigation makes the employer-liability point even more directly. The case, brought by a plaintiff who described being rejected from roughly 150 jobs that used Workday's screening, alleges that the AI tool discriminated on the basis of age, among other protected characteristics.
In February 2026, the court allowed the case to proceed as a nationwide collective action under age discrimination law, dramatically expanding its potential scope. More important for the principle, the court acknowledged that AI hiring tools could, in some cases, function as agents of the employer. That agency theory is the legal hinge. If the tool acts as the employer's agent, the employer is responsible for the tool's discriminatory outcomes, the same way a company is responsible for the acts of a recruiter it hired.
For a small business, the practical translation is blunt. You cannot outsource discrimination liability to your software. If the AI tool you deployed screens candidates in a way that disadvantages a protected group, the fact that an algorithm did it, and that a vendor built the algorithm, does not move the responsibility off you. The employment discrimination laws that have always applied to your hiring decisions still apply when an AI makes or shapes those decisions on your behalf.
The legal shift these cases represent
Step back and these two cases mark a clear shift in how the law treats AI in hiring. For a few years, AI hiring tools spread faster than the legal system addressed them, and employers adopted them in a grey zone. That zone is closing.
Two principles are crystallising. First, AI screening may count as generating a consumer report, dragging it under decades-old Fair Credit Reporting Act requirements for disclosure, authorisation, and adverse-action notices. Second, AI tools can be treated as agents of the employer, keeping discrimination liability with the employer rather than the vendor. Together they mean the legal protections that always governed human hiring decisions are being extended to cover AI-driven ones, and the employer remains the responsible party throughout.
This sits alongside the patchwork of AI-specific laws already in force, like New York City's Local Law 144, which requires bias audits for automated employment decision tools, and state frameworks like Colorado's, which require notice and human review for consequential decisions including employment. The lawsuits and the statutes are converging on the same destination: if you use AI to decide who gets hired, you owe the candidate transparency, you owe them a human in the loop, and you own the outcome.
Which small businesses are exposed
You are exposed if you use any tool that scores, ranks, or filters job applicants by algorithm before a human reviews them. This is broader than it sounds, because the screening is often bundled into software you adopted for general hiring, not specifically for AI. Check whether your applicant tracking system or hiring platform ranks or auto-filters candidates. If it does, you are in scope.
You are more exposed if you hire across multiple states, because you inherit the strictest rules that apply to any of your candidates. A tool that is fine in one state may trigger notice or audit requirements in another, and the lawsuits apply federal law that reaches everywhere. A small business hiring remotely across the country faces the widest exposure of all, because it touches the most legal regimes at once.
You are most exposed if you use AI screening and have none of the protections, no human review of the AI's decisions, no notice to candidates, no documentation of why you trust the tool, no awareness of the relevant laws. That combination, common AI screening with zero guardrails, is precisely the profile these lawsuits target, and it is unfortunately the default state of most small businesses that adopted an AI hiring tool to save time without thinking about the legal layer underneath it.
What to do before you hire again
Five protections, none expensive, all worth having in place before your next hire.
First, keep a human in the loop on every rejection. The most dangerous pattern, the one at the heart of the Eightfold complaint, is the AI discarding candidates before any human sees them. A qualified person reviewing the AI's screening decisions, with the genuine authority to overrule them, is the single most protective step you can take. It directly answers the harm these cases describe.
Second, tell candidates you use AI in hiring. A clear, plain-language notice that automated tools assist your screening addresses the transparency requirements these laws and lawsuits push toward, and it costs you nothing but a sentence on your application.
Third, document your vendor due diligence. Write down which tool you use, what you asked the vendor about bias testing and compliance, and what they told you. If a claim ever comes, showing you exercised reasonable care in choosing and vetting the tool is far better than showing you clicked buy and never asked.
Fourth, know the laws that apply to where you hire. At minimum, understand the Fair Credit Reporting Act implications, and check whether the cities and states you hire in have specific rules like NYC's bias audit requirement or Colorado's notice and human-review framework. You do not need to be a lawyer; you need to know which rules touch you.
Fifth, if you hire at any volume, get a one-time review from an employment lawyer of how you use AI in hiring. A few hundred dollars of advice now is dramatically cheaper than being the small business named in the next version of these lawsuits. This is the rare case where professional advice clearly pays for itself.
The questions to ask your AI hiring vendor
Before you trust a hiring tool, and as part of the due diligence you document, ask the vendor these questions and keep the answers in writing.
Ask whether the tool has been tested for bias against protected groups, and to see the results. Ask whether they consider the tool to generate a consumer report under the Fair Credit Reporting Act, and how they help you meet the disclosure and adverse-action requirements if so. Ask what data the tool uses to score candidates and where it comes from, because scraped data from across the web, as alleged in the Eightfold case, carries more risk than data the candidate knowingly provided. Ask whether the tool auto-rejects candidates without human review, and whether you can configure it to require human review. And ask what they will do to support you if a candidate challenges a decision the tool made.
A vendor with good answers to these questions is one you can use with reasonable confidence and a documented basis for trust. A vendor that cannot or will not answer them is a vendor whose risk you would be absorbing blindly, and the lawsuits make clear that the risk does not stay with them. The quality of these answers is itself a strong signal of whether the tool is safe to build your hiring on.
The bottom line
AI in hiring is not going away, and for many small businesses it is genuinely useful, cutting the time it takes to work through a stack of applications. The lawsuits are not an argument to stop. They are an argument to do it responsibly, with the candidate transparency, the human oversight, and the documented care that the law increasingly requires and that simple fairness always did.
The shift these cases represent is permanent. The grey zone where employers used AI screening without considering the legal layer is closing, and the principle replacing it is clear: the employer who uses an AI hiring tool owns the outcome it produces. A small business that internalises that now, and puts the five cheap protections in place, can keep using AI to hire efficiently while staying on the right side of a fast-moving area of law. A small business that keeps treating its hiring software as someone else's legal problem is one unlucky candidate away from learning, expensively, that it never was.
Sources
- Ogletree — Groundbreaking Lawsuit Tests Whether AI Hiring Tools Trigger FCRA Compliance
- Jones Walker — AI Hiring Under Fire: What the Eightfold Lawsuit Means for Every Employer Using Algorithmic Screening
- HR Brew — AI-powered hiring platform Eightfold AI faces lawsuit over hiring data used to rate candidates
- Fisher Phillips — Job Applicants Sue AI Screening Company for FCRA Violations: 5 Key Takeaways for Employers
- Outsolve — Workday AI Lawsuit Explained: Implications for HR
- American Bazaar — Rejected 150 times: Inside the AI hiring lawsuit against Workday
- ClassAction.org — AI Job Screening, Interview and Hiring Lawsuits
- HR C-Suite — The Legal Implications of AI-Driven Hiring Decisions: What HR Leaders Need to Know in 2026