On January 20, 2026, two job applicants sued Eightfold AI in California state court over evaluations they alleged they could not see. Their proposed class action claims that the company assembled information about applicants, produced employment-related reports and scores, and supplied them to employers without complying with federal and California consumer-reporting requirements.
The complaint raises a question that precedes any finding of discrimination: could the people being evaluated inspect and challenge the information used to assess them?
An applicant knows what they submitted. They do not necessarily know what someone else collected, inferred, or reported about them. A rejection supplies none of those answers.
The case tests whether established consumer-reporting protections apply to a new method of evaluating people. The threshold question remains unresolved in the public record examined here. Filing a complaint does not establish that Eightfold violated the law.
The Application and the Evaluation Are Different Records
Plaintiffs Erin Kistler and Sruti Bhaumik, who applied to positions at PayPal and Microsoft respectively, allege that Eightfold combined applicant information with third-party online sources and used AI to evaluate candidates. The complaint describes scores from zero to five reflecting predicted likelihood of success. It alleges that applicants lacked a meaningful opportunity to review or dispute the resulting reports.
Those allegations concern more than an employer reading a résumé. They describe a separate evaluation supplied by a third party. Whether that activity falls within consumer-reporting law is central to the case.
Eightfold disputes the claims. In a statement reported by the Guardian, the company said they were without merit and that it intended to defend itself vigorously.
The distinction matters because an applicant can correct the résumé they control. They cannot correct an unseen profile simply by submitting the same accurate résumé again.
A Credit-Reporting Law Also Covers Employment Reports
The name of the Fair Credit Reporting Act can obscure its reach. The statutory definition of a consumer report extends beyond credit history. It includes qualifying communications about personal characteristics, character, general reputation, and other specified information used to evaluate eligibility for employment.
The definition of a consumer reporting agency also matters. It addresses businesses that, for monetary fees, dues, or on a cooperative nonprofit basis, regularly assemble or evaluate consumer information to furnish consumer reports to third parties, using a means or facility of interstate commerce. An unfavorable score alone does not establish that either definition is satisfied.
The legal inquiry therefore concerns what the company does, what it communicates, and the purpose for which the information is collected or used. Calling a product recruiting software does not answer those questions. Neither does calling it AI.
The complaint also invokes California’s Investigative Consumer Reporting Agencies Act and Unfair Competition Law. These are additional legal theories, with their own requirements. The lawsuit seeks to establish that the alleged activities trigger existing protections; it does not depend on enactment of a new AI statute.
The Reporting Company and the Employer Have Different Duties
When the FCRA applies, it assigns responsibilities to both the reporting company and the employer using the report. The complaint’s FCRA count rests on that division: it alleges willful violations of section 1681b, which requires the reporting company to obtain the employer’s certification that the required disclosure and authorization were given.
A consumer reporting agency must follow reasonable procedures to assure maximum possible accuracy when preparing a consumer report. The law also provides for disclosure of information in the consumer’s file, subject to statutory qualifications, and a reinvestigation process for disputes about accuracy or completeness. The complaint describes these three duties but does not plead a violation of any of them.
Employers have separate obligations. The FTC explains that employers generally must provide the required disclosure and obtain written authorization before procuring a covered employment report. Before taking an adverse employment action based on the report, they must provide a copy and a summary of FCRA rights. A further notice follows the adverse action.
These steps make different parts of the process visible. Authorization concerns obtaining the report. Disclosure allows the person to inspect what was reported. A dispute provides a route to investigate an error. The employer’s notice identifies the reporting company and explains relevant rights.
Eightfold is the defendant in this case. Explaining an employer’s obligations does not establish that any particular employer violated them. It shows why the legal classification of the report can have consequences for more than its supplier.
An Error Can Matter Without Establishing Discrimination
Consider a hypothetical applicant whose profile includes another person’s employment history. The wrong information affects a screening score. The employer relies on that score when deciding whom to interview.
The applicant’s immediate problem is an inaccurate evaluation. Establishing whether a protected group suffered a discriminatory effect would answer a different question. Inspecting and disputing the information could matter regardless of the applicant’s protected characteristics.
Now change the hypothetical. The underlying employment history is accurate, but the software infers that the applicant lacks relevant skills. That presents a harder question. Disagreement with a prediction is not automatically proof of an inaccurate consumer report. What was communicated, whether it falls within the statute, and what the applicable accuracy obligation requires would need examination.
The distinction prevents the case from becoming a promise that every disappointing score can be overturned. Consumer-reporting protections do not guarantee a job, access to source code, or a complete explanation of every model inference.
They can provide something more specific: information about the evaluation and a legally defined process for addressing inaccuracies. Those rights matter before anyone knows whether a broader discrimination claim exists.
Private Enforcement Does Not Require an Agency Investigation First
The FCRA provides civil liability for willful noncompliance and negligent noncompliance. The available damages and required showing differ; this complaint pleads willfulness rather than negligence. Private claims do not require a regulator first to investigate and bring an enforcement action.
That matters where individuals encounter a consequential process they cannot inspect. An applicant can seek to enforce applicable rights directly rather than wait for an agency to examine the company’s practices.
It does not follow that these plaintiffs had no other possible remedy or that a proposed class will be certified. Standing, statutory coverage, the alleged violations, and the requirements for proceeding as a class remain questions the litigation must resolve.
