Cycle on May 25, 2026

I will list the open threads for the topic to determine what specific areas of AI liability need to be pursued in this research cycle.

I will search the web for information regarding the class action lawsuit *Kistler v. Eightfold AI Inc.* (Case No. C26-00214) to see its current status, the legal arguments, and the implications for AI candidate scoring and ranking systems under the FCRA and ICRAA.

I will fetch and read the contents of several of these articles to get full details, starting with the Akin Gump article, the Jones Walker article, and the Ogletree Deakins article. This will help me understand the core claims, the case citations, the court, and the implications. Let's fetch the Akin Gump article first.

I will fetch and read the Jones Walker article and the Ogletree Deakins article to get more granular detail. Let's do the Jones Walker article next.

This is an excellent, detailed, and highly current article from February 25, 2026. It details the lawsuit *Kistler et al. v. Eightfold AI Inc.*, No. 3:26-cv-1768 (N.D. Cal. 2026) / Contra Costa County Superior Court (filed Jan 20, 2026). Let's see what other articles can tell us about the procedural status or specific claims. I'll fetch the Ogletree Deakins article to get more legal analysis.

Now, let's search for more information to see if there are any recent updates on *Kistler v. Eightfold AI Inc.*, such as motion to dismiss filings, what the federal docket shows, or other developments, since the case was removed to federal court (N.D. Cal., Case No. 3:26-cv-01768). Let's do a search.

Let's fetch Shireen Wetmore's mediator post or do a search to see what the latest docket entries are or if there are any specific motions. Let's do a web search on the docket or latest filings in *Kistler v. Eightfold AI Inc.* to see what happened since the removal.

Let's fetch the PacerMonitor page or search more specifically for the Motion to Dismiss filed by Eightfold AI Inc. to see what arguments they are making. Let's do a search for `"Kistler v. Eightfold" "motion to dismiss"` or `"Kistler et al v. Eightfold AI Inc." "motion to dismiss"`.

Let's search for the actual text of the complaint, or articles explaining the specific arguments in Eightfold's motion to dismiss. Let's do a search for `"Kistler" "Eightfold" "motion to dismiss"` or `"Kistler" "Eightfold" "motion to dismiss" grounds` or `"Eightfold" "FCRA" "motion to dismiss" 2026`.

Excellent. The Justia docket shows: - Case name: *Kistler et al v. Eightfold AI Inc.* - Case number: 4:26-cv-01768 (Note: It is 4:26-cv-01768 or 3:26-cv-01768, listed as 4:26-cv-01768 in the Northern District of California under Judge Yvonne Gonzalez Rogers). - Filing 29: MOTION to Dismiss filed by Eightfold AI Inc. on or around April 20, 2026. - The Motion to Dismiss Hearing is set for August 4, 2026, at 2:00 PM in Oakland, Courtroom 1, 4th Floor before Judge Yvonne Gonzalez Rogers. - The docket also notes: "Plaintiffs will file their opposition to any motion to dismiss by 7/9/2026" (or similar, let's confirm the schedule). Let's do a search on the SSRN paper or check what the arguments in the motion to dismiss are, or other articles talking about Eightfold's defense arguments. Let's do a search on `"Eightfold" "motion to dismiss"` or `"Eightfold" "FCRA" defense` or `"Kistler" "Eightfold" defense`.

Let's search for the Warden AI article "The Eightfold Class Action: 5 Webinar Insights on FCRA & AI Hiring Risk" or fetch it to see what the defenses being used by Eightfold and the key legal questions are. Let's fetch that URL.

Let's search for and fetch the Class Action complaint itself or more legal analysis on the specific claims and defenses. I see there's a PDF of the complaint at `https://www.classaction.org/media/kistler-et-al-v-eightfold-ai-inc-complaint.pdf`. Let's fetch the PDF or search for the specific legal claims. Let's do a web search on `"Kistler v. Eightfold AI Inc." "investigative consumer reporting agencies act"` or `"Kistler v. Eightfold" "consumer reporting agency"` or `"Kistler v. Eightfold" "complaint"`. Let's see if we can find a summary of the complaint or if there is a website with a detailed legal breakdown of the claims.

Let's fetch the Fox Rothschild article (`https://dataprivacy.foxrothschild.com/2026/04/articles/general-privacy-data-security-news-developments/when-ai-meets-the-fcra-what-the-eightfold-class-action-means-for-employers-and-hr-technology-providers/`) and the Schlanger Law Group article (`https://consumerprotection.net/ai-hiring-tools-fcra-eightfold-ai-lawsuit/`) if possible, or another one like Kress Inc. (`https://kressinc.com/blog/when-does-an-ai-hiring-score-become-a-consumer-report/`). Let's fetch Fox Rothschild first.

This is incredibly detailed. Let's look at the specific legal theories and claims. The case is *Kistler v. Eightfold AI Inc.*, Case No. 4:26-cv-01768 (N.D. Cal. 2026). The named plaintiffs are Erin Kistler and Sruti Bhaumik. The plaintiffs argue that Eightfold AI: 1. Operates as an unregistered Consumer Reporting Agency (CRA) under the FCRA and California's Investigative Consumer Reporting Agencies Act (ICRAA). 2. Generates "Match Scores" (ranking candidates from 0 to 5) and profiles ("Opaque Candidate Profiles" or "Shadow Dossiers") that constitute "consumer reports" under the FCRA and "investigative consumer reports" under California's ICRAA. 3. Violates the FCRA by compiling personal data (including scraping social media profiles, location data, online activity, and online cookies) and providing these reports to employers without providing necessary disclosures, obtaining candidate consent, or providing a mechanism to dispute inaccurate information. 4. Violates California's ICRAA, which is particularly dangerous because under the ICRAA, an "investigative consumer report" is triggered when information on character, reputation, personal characteristics, or mode of living is obtained "through any means" (unlike the federal FCRA, which requires personal interviews). ICRAA also carries statutory damages of $10,000 per violation (versus $100 to $1,000 for FCRA). 5. Violates California's Unfair Competition Law (UCL) / consumer protection claims for unfair and deceptive conduct. Let's check if there are other recent cases or regulatory developments on AI liability. The topic brief asks us to: "Track how global regulators are approaching AI liability: new legislation and proposals across jurisdictions, enforcement actions, court decisions, regulatory guidance documents, industry compliance frameworks, and shifts in how liability is being assigned between developers and deployers. Surface emerging trends a legal or risk team at an enterprise need to stay current on." Let's search for recent AI liability legislation, proposals, or enforcement actions in Q2 2026 (April/May 2026), or major updates globally (EU, US, UK, etc.). Let's do a web search.

Let's search for and fetch some of these highly relevant and recent articles. First, let's fetch the Bird & Bird article on AI Liability and the PLD (revised Product Liability Directive 2024), which is from 2026: `https://www.twobirds.com/en/insights/2026/france/ai-liability-in-light-of-the-new-2024-pld-expanded-liability-challenging-defences-and-new-evidentiar`. Let's fetch that.

This is a crucial, highly detailed update that directly refines the EU PLD and AI Liability Directive status. Let's make sure we capture this. Key points: - The EU proposed AI Liability Directive (AILD) was withdrawn in 2025 by the European Commission. - This leaves a dual regulatory framework: the AI Act (a compliance-based legislation) and the 2024 Product Liability Directive (PLD), which is a strict liability regime. - Highly integrated link between the AI Act and the 2024 PLD: non-compliance with the AI Act's safety obligations (such as continuous risk management, data quality, technical documentation, transparency) will be considered when assessing potential defectiveness under the 2024 PLD and can trigger a rebuttable presumption of defect. - Under Articles 9-11 of the 2024 PLD, national courts may order defendants to disclose relevant evidence once the claimant shows the claim is plausible. If the defendant fails to comply with a disclosure order, or if it breaches mandatory safety requirements (like those under the AI Act), or if the alleged damage results from an obvious malfunction, the product is presumed defective. This effectively shifts the burden of proof to the defendant to demonstrate that the product was not defective or that any defect did not cause the damage. - The 2024 PLD explicitly confirms that AI systems, software, and goods equipped with AI (including updates) are "products" under the Directive. Liable economic operators include the manufacturer, component manufacturer, importer, authorized representative, or fulfillment service provider. Let's search for other recent developments in AI liability court cases or regulatory enforcement actions in the US, UK, or EU in 2026. Let's search for `"algorithmic pricing" liability` or `"algorithmic pricing" litigation` or `"AI liability" court cases 2026`. Let's see what comes up.

This is extremely valuable! Let's fetch the Freshfields article, the Wilson Sonsini article, and the Skadden article to understand the latest state of algorithmic pricing litigation and the legislative developments in 2026. Let's first fetch the Freshfields article: `https://www.freshfields.com/en/our-thinking/blogs/a-fresh-take/2026-enforcement-priority-algorithmic-pricing-102mh8k` (or the actual URL if we can find it). Wait, the title is "2026 Enforcement Priority: Algorithmic Pricing - Freshfields" and the URL is `https://www.freshfields.com/en/our-thinking/blogs/a-fresh-take/2026-enforcement-priority-algorithmic-pricing-102mh8k`. Let's fetch it. If it fails, I'll fetch another. Let's try fetching it.

This is an incredibly rich finding! Let's analyze this Freshfields article: 1. "2026 Enforcement Priority: Algorithmic Pricing" (published Feb 9, 2026). 2. The US Federal Trade Commission (FTC) has opened a probe into the use of AI-driven tools to generate different prices for different customers, following up on its January 2025 6(b) surveillance pricing study. 3. In California, Attorney General Rob Bonta announced an investigation into how businesses use personal data to set targeted prices (surveillance pricing), issuing inquiry letters to grocers, hotels, and retailers with a significant online presence requesting detailed information on their use of consumer data, pricing experiments, and compliance measures. 4. In New York, the **Algorithmic Pricing Disclosure Act** (signed by Gov. Kathy Hochul in May 2025, went into effect in November 2025) requires retailers using personal data to set individualized prices to post a conspicuous, all-caps disclosure: “THIS PRICE WAS SET BY AN ALGORITHM USING YOUR PERSONAL DATA.” (A challenge to this law remains on appeal in 2026). 5. New York is also considering a bill to outlaw algorithmic price discrimination based on protected characteristics like race and age. Other states like Pennsylvania, Texas, and New Mexico are considering similar legislation. Let's search for California's AB 325 which amendments to the Cartwright Act took effect on January 1, 2026. The Morgan Lewis article title is "California's Algorithmic Pricing Antitrust Amendments to the Cartwright Act Take Effect." Let's fetch that Morgan Lewis article or search for `"AB 325" "Cartwright Act"` to see what it is. Let's do a search first.

This is fantastic. Let's fetch the Alston & Bird article (`https://www.alston.com/en/insights/publications/2025/11/california-ab-325-antitrust-standards`) and the Cleary Gottlieb article (`https://www.clearygottlieb.com/news-and-insights/publication-listing/californias-antitrust-law-amendments-kick-in-targeting-algorithmic-pricing`) to understand how California's AB 325 and SB 763 amend the Cartwright Act to target algorithmic pricing, and how this lowers pleading standards or changes liability. Let's fetch the Alston & Bird article first.

This is an exceptional and highly detailed legal update. Let's summarize the key aspects of California's **AB 325** and **SB 763** which took effect on **January 1, 2026**: 1. It amends California's state antitrust law—the Cartwright Act—to explicitly address the use of algorithms. 2. It adds **Section 16729** to the Business and Professions Code, broadly prohibiting the use or distribution of "common pricing algorithms" in anticompetitive agreements. 3. A "common pricing algorithm" is defined as any methodology (computer, software, or technology) used by two or more persons that uses competitor data to recommend, align, stabilize, set, or otherwise influence a price or commercial term. 4. There is no exception for shared tools that contain only publicly available data (the "public data" defense is explicitly rejected). 5. It creates liability for "coercing" others to adopt algorithm-recommended prices, even without a formal agreement. 6. It lowers the pleading threshold for Cartwright Act claims (reversing the federal *Twombly* standard of "tending to exclude the possibility of independent action" for California state court antitrust pleadings). Under the new **Section 16756.1**, a complaint is sufficient if it alleges facts that make a conspiracy plausible. 7. **SB 763** raises corporate criminal penalties to **$6 million** (up from $1 million) and creates new civil penalties of up to **$1 million** in actions brought by state enforcers, which are cumulative with existing Cartwright Act remedies. Let's search for the Wilson Sonsini article or the Skadden article to see what we can find about the federal courts' decisions on algorithmic pricing in late 2025/early 2026. Let's fetch the Wilson Sonsini article: `https://www.wsgr.com/en/insights/2026-antitrust-year-in-preview-algorithmic-pricing.html`. Let's try to fetch it.

Ah, the firecrawl fetch timed out. Let's try fetching the Skadden article or search for the Ninth Circuit decision that Wilson Sonsini mentioned. Wait, let's look at the excerpt from Wilson Sonsini: "The Ninth Circuit upheld the district court's dismissal and imposed a limited bar on stating claims based on algorithmic pricing tools, holding..." Let's search for Ninth Circuit case on "algorithmic pricing" or "pricing algorithm" or "RealPage" or "Yardi" or "hotel" or "airline" or "algorithmic price fixing" Ninth Circuit 2025 or 2026. Let's do a search.

The web search budget is exhausted, but we have an incredible wealth of detailed information from our previous fetches and searches! We can now write extremely solid, evidence-grounded findings. Let's review the topics we have: 1. **The Eightfold AI Class Action (*Kistler v. Eightfold AI Inc.*, No. 4:26-cv-01768, N.D. Cal. 2026)**: - This is a groundbreaking class action filed on January 20, 2026 in California state court (Contra Costa County Superior Court) and subsequently removed to federal court (Northern District of California, assigned to Judge Yvonne Gonzalez Rogers). - The plaintiffs, Erin Kistler and Sruti Bhaumik, represent a nationwide class of job seekers. They allege that Eightfold AI operates as an unregistered "Consumer Reporting Agency" (CRA) under the federal Fair Credit Reporting Act (FCRA) and California's Investigative Consumer Reporting Agencies Act (ICRAA). - Instead of alleging discrimination (the typical vector of attack on HR AI), the lawsuit attacks the *process* and *existence* of the algorithm in secret. It alleges that Eightfold scraped public data on over one billion workers, generated "Match Scores" (ranking candidates 0 to 5) and built "Opaque Candidate Profiles" (or "Shadow Dossiers") without candidate consent, disclosure, or a mechanism to dispute/correct errors. - The procedural status: Eightfold filed a Motion to Dismiss (Filing 29) on or around April 20, 2026. The hearing is set for August 4, 2026, in Oakland before Judge Yvonne Gonzalez Rogers. Plaintiffs' opposition is due by July 9, 2026. - Legal exposure is massive, especially under California's ICRAA. Unlike the federal FCRA, which defines an "investigative consumer report" as requiring personal interviews, California's ICRAA applies regardless of how information is obtained ("through any means"), making it a direct hit for AI data scraping. ICRAA also allows for statutory damages of up to $10,000 per violation (compared to $100-$1,000 under FCRA), which across a class can be existential. - This lawsuit, alongside cases like *Mobley v. Workday* (where the court held that an AI vendor acted as an "agent" of employers, triggering direct employment liability), creates a "pincer movement" on AI vendors. *Workday* attacks discriminatory outcomes; *Eightfold* attacks secretive data assembly processes. Both reject the defense that vendors are merely "neutral tool providers." 2. **The Shift in EU AI Liability Framework: Withdrawal of the AI Liability Directive (AILD) and the Strict Liability Regime of the 2024 Product Liability Directive (PLD)**: - In 2025, the European Commission withdrew the proposed AI Liability Directive (AILD). - This leaves a dual framework: the EU AI Act (a compliance-focused regulation) and the revised 2024 Product Liability Directive (PLD), which is a strict liability regime. - The two frameworks are deeply interconnected: non-compliance with the safety, transparency, and documentation requirements of the EU AI Act can trigger a rebuttable presumption of defectiveness under the 2024 PLD. - Under Articles 9-11 of the 2024 PLD, national courts can order defendants to disclose relevant evidence once a claimant shows a claim is plausible. Failure to comply with a disclosure order, breaching mandatory safety requirements, or obvious malfunctions of an AI system under foreseeable use will trigger a rebuttable presumption of defectiveness and causation, shifting the burden of proof to the manufacturer or operator to prove the product was safe. - The 2024 PLD explicitly defines AI systems, software, and AI-enabled goods as "products," making manufacturers, component manufacturers, and importers strictly liable for death, bodily injury, property damage, or data loss. 3. **The 2026 Algorithmic Pricing Enforcement and Legislative Landscape**: - Algorithmic pricing has become a primary target for regulators and state legislators in 2026. - **Federal & State Enforcement**: The FTC has opened a formal probe into the use of AI-driven "surveillance pricing" tools that set individualized prices based on granular consumer data (e.g., location, demographics, browsing behavior), following its January 2025 6(b) market study. In California, Attorney General Rob Bonta launched a major investigation into dynamic and personalized pricing, sending inquiry letters to grocers, hotels, and retailers requesting detailed data-use and compliance audits. - **State Legislation**: - **New York's Algorithmic Pricing Disclosure Act** (signed May 2025, effective November 2025) requires retailers to post a conspicuous, all-caps disclosure: "THIS PRICE WAS SET BY AN ALGORITHM USING YOUR PERSONAL DATA." - **California's AB 325 & SB 763** (effective January 1, 2025/2026, specifically taking effect January 1, 2026): AB 325 amends the state's Cartwright Act to explicitly ban "common pricing algorithms" that use competitor data to recommend or set prices, rejecting the "public data" defense. It also creates liability for coercing others to use algorithmic pricing and significantly lowers the pleading standard in state courts, rejecting the federal *Twombly* standard. SB 763 increases corporate criminal penalties to $6 million and civil penalties to $1 million per violation. Let's look at the prior findings to see if we should update or refine any of them. - "May 20, 2026 Cycle Summary: Global AI Liability Developments" (slug: `cycle-summary-2026-05-20`) - "EU Product Liability Directive: Transposition Countdown Links AI Act Non-Compliance to Strict Liability" (slug: `eu-product-liability-directive-pld-ai-act-strict-liability-2026`) - "Global AI Enforcement Landscape Q1 2026: Data Privacy, AI-Washing, and Operational Risk" (slug: `global-ai-enforcement-q1-2026-trends`) Wait, we have a specific thread opened about the Eightfold AI Class Action: "Track the progress of the class action lawsuit Kistler v. Eightfold AI Inc. (Case No. C26-00214) in California on whether AI candidate scoring and ranking systems constitute 'consumer reports' subject to the FCRA and ICRAA." I will write a specific finding for this thread using a fresh slug like `kistler-v-eightfold-ai-fcra-icraa-class-action-2026`. I will also write a finding on California's AB 325 and the 2026 Algorithmic Pricing Enforcement landscape under a slug like `algorithmic-pricing-antitrust-liability-ab325-2026`. And I will update/refine the EU PLD finding or write a new one if appropriate. Let's see if we can refine `eu-product-liability-directive-pld-ai-act-strict-liability-2026`. Let's check the existing threads. The only open thread is `019e5907-1f7d-7e43-a94c-4f6cd907e657` which is exactly the Eightfold AI Class Action question. Let's write the first note on *Kistler v. Eightfold AI Inc.* to resolve that thread. Wait, let's look at the rules for writing a note: - Name and link the actual thing. - Carry 1-2 representative verbatim quotes, copied exactly, each kept with the link it came from. - Say what it means. - No YAML frontmatter. The title is the first "# " heading. - End with a "## Sources" list. Let's write the first note on Kistler v. Eightfold AI Inc. using slug `kistler-v-eightfold-ai-fcra-icraa-class-action-2026`. Let's draft the body carefully. ### Note Draft: *Kistler v. Eightfold AI Inc.* # FCRA and ICRAA Class Action Against Eightfold AI: Reframing AI Recruiting Liability Around Consumer Reporting In a groundbreaking class action lawsuit, *Kistler et al. v. Eightfold AI Inc.* (Case No. 4:26-cv-01768, N.D. Cal. 2026), plaintiffs have bypassed traditional AI discrimination claims to target the very existence and process of automated hiring tools. The lawsuit, filed on January 20, 2026, in California state court and removed to the Northern District of California under Judge Yvonne Gonzalez Rogers, alleges that Eightfold AI operates as an unregistered "Consumer Reporting Agency" (CRA) under the federal Fair Credit Reporting Act (FCRA) and California's Investigative Consumer Reporting Agencies Act (ICRAA). By scraping public data on over one billion workers, generating "Match Scores" (ranking candidates 0 to 5) and compiling "Opaque Candidate Profiles" (or "Shadow Dossiers") without applicant consent, disclosures, or a dispute mechanism, the lawsuit alleges Eightfold unlawfully furnishes "consumer reports" to employer-clients. This litigation reframes automated hiring compliance: instead of defending how an algorithm makes decisions (discrimination), vendors and employers must now defend how data is assembled in secret (consumer protection). ### Verbatim Quotes and Key Legal Mechanics Under the FCRA and California’s ICRAA, a "consumer report" is triggered when a third party compiles information bearing on an individual's character, reputation, or personal characteristics for employment decisions. As noted by Fox Rothschild: > "The Kistler complaint alleges that the output from Eightfold’s platform satisfies this definition because it goes far beyond raw resume data. Indeed, the complaint asserts that Eightfold’s platform incorporates AI-generated inferences about candidates’ 'preferences, characteristics, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes,' and distills them into a 'Match Score' that ranks candidates from 0 to 5 by 'likelihood of success'." > — [Fox Rothschild LLP, "When AI Meets the FCRA: What the Eightfold Class Action Means for Employers and HR Technology Providers" (April 2026)](https://dataprivacy.foxrothschild.com/2026/04/articles/general-privacy-data-security-news-developments/when-ai-meets-the-fcra-what-the-eightfold-class-action-means-for-employers-and-hr-technology-providers/) If the platform is deemed a CRA, both the vendor and the employer face strict statutory compliance mandates, including standalone disclosures and pre-adverse action notices. The risk is magnified exponentially in California under the ICRAA, which applies a broader standard than the federal FCRA and carries devastating statutory damages: > "Under the FCRA, an 'investigative consumer report' is defined more narrowly. It applies only when information about a consumer’s character, reputation, personal characteristics, or mode of living is obtained through **personal interviews**... Under the ICRAA, however, the same category of information triggers 'investigative consumer report' treatment regardless of how the information is obtained '**through any means**' making AI-assembled profiles far more likely to qualify... The ICRAA provides for the greater of actual damages or $10,000 per violation, compared to the FCRA where damages are $100 to $1,000 per violation." > — [Fox Rothschild LLP, "When AI Meets the FCRA: What the Eightfold Class Action Means for Employers and HR Technology Providers" (April 2026)](https://dataprivacy.foxrothschild.com/2026/04/articles/general-privacy-data-security-news-developments/when-ai-meets-the-fcra-what-the-eightfold-class-action-means-for-employers-and-hr-technology-providers/) ### The Procedural Status & The Vendor "Liability Squeeze" Eightfold AI filed a Motion to Dismiss (Filing 29) on or around April 20, 2026. The Motion to Dismiss hearing is scheduled for **August 4, 2026**, in Oakland before Judge Yvonne Gonzalez Rogers, with plaintiffs' opposition due by July 9, 2026. This lawsuit represents a "pincer movement" when paired with *Mobley v. Workday* (where the court held that an AI vendor acted as an "agent" of employers under the ADEA). As legal experts warn: > "Together, these cases form a pincer. *Workday* says the vendor is an agent liable for discrimination. *Eightfold* says the vendor is a consumer reporting agency subject to transparency mandates. One attacks outcomes; the other attacks process. Both point the same direction: AI hiring vendors may no longer be able to hide behind the argument that they merely provide tools." > — [Jones Walker LLP, "AI Hiring Under Fire: What the Eightfold Lawsuit Means for Every Employer Using Algorithmic Screening" (February 2026)](https://www.joneswalker.com/en/insights/blogs/ai-law-blog/ai-hiring-under-fire-what-the-eightfold-lawsuit-means-for-every-employer-using-a.html?id=102mkh2) This pincer exacerbates the contractual "liability squeeze" for enterprises: while courts are expanding vendor accountability, 88% of AI vendors cap their own liability (often to subscription fees) while only 17% warrant regulatory compliance, leaving employers legally responsible for outcomes generated by opaque algorithms they do not control. ## Sources - [Fox Rothschild LLP](https://dataprivacy.foxrothschild.com/2026/04/articles/general-privacy-data-security-news-developments/when-ai-meets-the-fcra-what-the-eightfold-class-action-means-for-employers-and-hr-technology-providers/) — "When AI Meets the FCRA: What the Eightfold Class Action Means for Employers and HR Technology Providers" (April 2026) - [Jones Walker LLP](https://www.joneswalker.com/en/insights/blogs/ai-law-blog/ai-hiring-under-fire-what-the-eightfold-lawsuit-means-for-every-employer-using-a.html?id=102mkh2) — "AI Hiring Under Fire: What the Eightfold Lawsuit Means for Every Employer Using Algorithmic Screening" (February 25, 2026) - [Warden AI](https://www.warden-ai.com/events-webinars/the-eightfold-class-action-5-webinar-insights-on-fcra-ai-hiring-risk) — "The Eightfold Class Action: 5 Webinar Insights on FCRA & AI Hiring Risk" (April 3, 2026 update) - [Justia Dockets](https://dockets.justia.com/docket/california/candce/4:2026cv01768/465146) — *Kistler et al v. Eightfold AI Inc.* (4:26-cv-01768, N.D. Cal.) Docket and Motion to Dismiss Filing Let's call the `write_note` tool for this finding. I will state my intent before calling the tool.

I will write a detailed finding on the *Kistler v. Eightfold AI Inc.* class action lawsuit, which addresses the applicability of the Fair Credit Reporting Act (FCRA) and California's Investigative Consumer Reporting Agencies Act (ICRAA) to AI-powered recruitment and candidate-scoring tools. This note directly resolves the open thread on this topic.

I will now write a finding on California's **AB 325** and the **2026 Algorithmic Pricing Enforcement and Legislative Landscape**, outlining how California's Cartwright Act amendments (effective January 1, 2026) and state/federal regulatory actions are fundamentally shifting antitrust and consumer protection liability for enterprises using dynamic pricing models. Let's write the note.

I will now update the prior finding on the EU Product Liability Directive transposition countdown to incorporate the crucial new detail that the European Commission formally withdrew the proposed AI Liability Directive (AILD) in 2025, cementing a dual regulatory framework consisting solely of the EU AI Act (compliance) and the 2024 Product Liability Directive (strict liability). This update will reuse the slug `eu-product-liability-directive-pld-ai-act-strict-liability-2026`. Let's write the note.

Let's write a cycle summary to synthesize these findings. Wait, let's review the required slug for the cycle summary. Since this is the summary for the cycle, I will write it under `cycle-summary-2026-05-25`. Let's draft the cycle summary. ### Note Draft: Cycle Summary # May 25, 2026 Cycle Summary: Algorithmic Pricing, Consumer Protection Pincers, and Strict Liability Resets This research cycle surfaced three monumental developments in global AI liability, regulatory enforcement, and litigation that collectively signal a profound shift in how courts, legislators, and regulators assign accountability for automated systems. ### 1. The Eightfold AI Class Action: Reframing AI Recruiting Under the FCRA & ICRAA A groundbreaking class action lawsuit, *Kistler v. Eightfold AI Inc.* (Case No. 4:26-cv-01768, N.D. Cal. 2026), has bypassed traditional AI discrimination claims to target the very existence and process of automated hiring tools. Filed in state court and removed to the Northern District of California (before Judge Yvonne Gonzalez Rogers), the lawsuit alleges that Eightfold AI operates as an unregistered "Consumer Reporting Agency" (CRA) under the federal Fair Credit Reporting Act (FCRA) and California's Investigative Consumer Reporting Agencies Act (ICRAA). By scraping public data on over one billion workers and generating "Match Scores" (ranking candidates 0 to 5) without applicant consent, disclosures, or dispute mechanisms, the lawsuit alleges Eightfold unlawfully furnishes "consumer reports." Pair this with *Mobley v. Workday* (establishing AI vendors as employers' "agents" under the ADEA), and a "pincer movement" emerges: *Workday* attacks discriminatory outcomes, while *Eightfold* attacks secretive data assembly processes. Both reject the defense that vendors are merely "neutral tool providers." ### 2. Algorithmic Pricing Liability: California AB 325 and the State-Federal Crackdown Effective **January 1, 2026**, California's Assembly Bill 325 (AB 325) and Senate Bill 763 (SB 763) have fundamentally reshaped the legal landscape for algorithmic pricing. AB 325 explicitly prohibits the use or distribution of "common pricing algorithms" that leverage competitor data (even if public), creates liability for coercing others to adopt algorithm-recommended prices, and lowers the pleading threshold in state courts by rejecting the federal *Twombly* standard. To deter violations, SB 763 raises corporate criminal penalties to **$6 million** and civil penalties to **$1 million** per violation. Concurrently, regulators are cracking down on "surveillance pricing." The FTC has opened a formal probe into the use of AI-driven tools to generate individualized prices based on granular consumer data. In California, Attorney General Rob Bonta launched a major investigation, sending inquiry letters to grocers, hotels, and retailers. In New York, the **Algorithmic Pricing Disclosure Act** (effective November 2025) now mandates a conspicuous, all-caps disclosure: "THIS PRICE WAS SET BY AN ALGORITHM USING YOUR PERSONAL DATA." ### 3. EU Strict Liability Reset: Withdrawal of the AI Liability Directive The European Commission's formal withdrawal of the proposed AI Liability Directive (AILD) in 2025 has cemented a dual regulatory framework in Europe. The **EU AI Act** serves as the compliance-based safety standard, while the revised **2024 Product Liability Directive (PLD)** acts as the primary strict civil liability regime. Under the 2024 PLD, AI systems, software, and AI-enabled goods are explicitly defined as "products." Crucially, non-compliance with the EU AI Act's safety and transparency obligations directly feeds into product liability litigation. Under Articles 9–11, national courts can order defendants to disclose relevant evidence, and failure to comply, combined with AI Act breaches, triggers a **rebuttable presumption of defectiveness and causation**—effectively shifting the burden of proof to the manufacturer or operator to prove the system was safe. ## Sources - [Fox Rothschild LLP](https://dataprivacy.foxrothschild.com/2026/04/articles/general-privacy-data-security-news-developments/when-ai-meets-the-fcra-what-the-eightfold-class-action-means-for-employers-and-hr-technology-providers/) — "When AI Meets the FCRA: What the Eightfold Class Action Means for Employers and HR Technology Providers" (April 2026) - [Jones Walker LLP](https://www.joneswalker.com/en/insights/blogs/ai-law-blog/ai-hiring-under-fire-what-the-eightfold-lawsuit-means-for-every-employer-using-a.html?id=102mkh2) — "AI Hiring Under Fire: What the Eightfold Lawsuit Means for Every Employer Using Algorithmic Screening" (February 25, 2026) - [Alston & Bird LLP](https://www.alston.com/en/insights/publications/2025/11/california-ab-325-antitrust-standards) — "California’s AB 325 Prohibits Shared Pricing Algorithms" (November 2025) - [Freshfields Bruckhaus Deringer](https://www.freshfields.com/en/our-thinking/blogs/a-fresh-take/2026-enforcement-priority-algorithmic-pricing-102mh8k) — "2026 Enforcement Priority: Algorithmic Pricing" (February 9, 2026) - [Bird & Bird](https://www.twobirds.com/en/insights/2026/france/ai-liability-in-light-of-the-new-2024-pld-expanded-liability-challenging-defences-and-new-evidentiar) — "AI Liability in light of the new 2024 PLD: expanded liability, challenging defences, and new evidentiary burdens" (February 17, 2026) Let's call the `write_note` tool for the cycle summary. I will state my intent before making the call.

I will write the comprehensive May 25, 2026 Cycle Summary note to synthesize the findings from this research cycle.

I will now resolve the open thread regarding the *Kistler v. Eightfold AI Inc.* class action since we have thoroughly researched its status, legal claims, defenses, and implications, and written a detailed finding. Let's resolve the thread.

I will now record a new thread for follow-up on how the federal court rules on Eightfold AI's Motion to Dismiss in *Kistler v. Eightfold AI Inc.* (scheduled for hearing on August 4, 2026), which will determine if algorithmic candidate scoring platforms can indeed be held liable as Consumer Reporting Agencies under the FCRA and ICRAA. Let's record the thread.

I will now call `finish_cycle` to complete this research cycle, as I have written all the findings and resolved/recorded the relevant threads. Let's finish the cycle.

I have completed the research cycle, tracking major shifts in AI recruiting liability, algorithmic pricing regulations, and the EU's strict liability framework. I resolved the open thread on the *Kistler v. Eightfold AI Inc.* class action, detailing how it reframes automated hiring around consumer reporting laws (FCRA/ICRAA) and scheduled a new thread to monitor the court's upcoming August 4, 2026 ruling on Eightfold's Motion to Dismiss. Additionally, I documented California's landmark AB 325 antitrust amendments targeting pricing algorithms and updated findings on the EU's strict product liability regime following the formal withdrawal of the AI Liability Directive.