May 25, 2026 Cycle Summary: Algorithmic Pricing, Consumer Protection Pincers, and Strict Liability Resets

This research cycle surfaced three monumental developments in global AI liability, regulatory enforcement, and litigation that collectively signal a profound shift in how courts, legislators, and regulators assign accountability for automated systems.

1. The Eightfold AI Class Action: Reframing AI Recruiting Under the FCRA & ICRAA

A groundbreaking class action lawsuit, Kistler v. Eightfold AI Inc. (Case No. 4:26-cv-01768, N.D. Cal. 2026), has bypassed traditional AI discrimination claims to target the very existence and process of automated hiring tools. Filed in California state court and removed to the Northern District of California (before Judge Yvonne Gonzalez Rogers), the lawsuit alleges that Eightfold AI operates as an unregistered "Consumer Reporting Agency" (CRA) under the federal Fair Credit Reporting Act (FCRA) and California's Investigative Consumer Reporting Agencies Act (ICRAA).

By scraping public data on over one billion workers and generating "Match Scores" (ranking candidates 0 to 5) without applicant consent, disclosures, or dispute mechanisms, the lawsuit alleges Eightfold unlawfully furnishes "consumer reports." Pair this with Mobley v. Workday (establishing AI vendors as employers' "agents" under the ADEA), and a "pincer movement" emerges: Workday attacks discriminatory outcomes, while Eightfold attacks secretive data assembly processes. Both reject the defense that vendors are merely "neutral tool providers."

2. Algorithmic Pricing Liability: California AB 325 and the State-Federal Crackdown

Effective January 1, 2026, California's Assembly Bill 325 (AB 325) and Senate Bill 763 (SB 763) have fundamentally reshaped the legal landscape for algorithmic pricing. AB 325 explicitly prohibits the use or distribution of "common pricing algorithms" that leverage competitor data (even if public), creates liability for coercing others to adopt algorithm-recommended prices, and lowers the pleading threshold in state courts by rejecting the federal Twombly standard. To deter violations, SB 763 raises corporate criminal penalties to $6 million and civil penalties to $1 million per violation.

Concurrently, regulators are cracking down on "surveillance pricing." The FTC has opened a formal probe into the use of AI-driven tools to generate individualized prices based on granular consumer data. In California, Attorney General Rob Bonta launched a major investigation, sending inquiry letters to grocers, hotels, and retailers. In New York, the Algorithmic Pricing Disclosure Act (effective November 2025) now mandates a conspicuous, all-caps disclosure: "THIS PRICE WAS SET BY AN ALGORITHM USING YOUR PERSONAL DATA."

3. EU Strict Liability Reset: Withdrawal of the AI Liability Directive

The European Commission's formal withdrawal of the proposed AI Liability Directive (AILD) in 2025 has cemented a dual regulatory framework in Europe. The EU AI Act serves as the compliance-based safety standard, while the revised 2024 Product Liability Directive (PLD) acts as the primary strict civil liability regime.

Under the 2024 PLD, AI systems, software, and AI-enabled goods are explicitly defined as "products." Crucially, non-compliance with the EU AI Act's safety and transparency obligations directly feeds into product liability litigation. Under Articles 9–11, national courts can order defendants to disclose relevant evidence, and failure to comply, combined with AI Act breaches, triggers a rebuttable presumption of defectiveness and causation—effectively shifting the burden of proof to the manufacturer or operator to prove the system was safe.