What Courts Have Actually Decided About Hiring Algorithms

What to stop assuming

Two beliefs circulate among employers that buy screening software. The first is that a regulator has already ruled on algorithmic bias in hiring. The second is that the vendor, not the employer, carries the risk. The public record supports neither. It supports something narrower: one settled federal case about a rule that named ages, one private case against a vendor that has survived the pleadings without reaching the merits, and a federal policy that changes what the regulator is likely to pursue. This is not legal advice.

The one concluded federal case

EEOC v. iTutorGroup, No. 1:22-cv-02565, was brought under the Age Discrimination in Employment Act. The EEOC's press release of 11 September 2023 says the company's application software was programmed to "automatically reject female applicants aged 55 or older and male applicants aged 60 or older", and that more than 200 qualified applicants were rejected because of their age¹. The court entered the consent decree on 8 September 2023².

The terms were a payment of $365,000 to the applicants who were automatically rejected, injunctions against hiring discrimination based on age or sex and against requesting applicants' birth dates, and monitoring by the EEOC for at least five years¹. The Clearinghouse summary of the docket describes the injunction as lasting five years from its effective date or three years after hiring resumes, whichever is later².

What this settles is modest and useful: if a rule that excludes people by age is written into the software, the employer answers for it as it would for a recruiter's instruction. What it does not settle is anything about a statistical model that produces skewed outcomes without a rule that says so. The rule here was explicit, and the case ended in a settlement, not a judgment on the merits.

The vendor case that is still being pleaded

Mobley v. Workday, No. 3:23-cv-00770, is a private case in the Northern District of California before Judge Rita Lin. On 16 May 2025 the court granted preliminary certification of an ADEA collective of applicants aged 40 and over who were denied employment recommendations through Workday's platform since 24 September 2020⁶. The firm reporting that order notes that the certification is preliminary and that Workday disputes the claims⁶.

Three later orders are worth reading as the court wrote them.

1. On 6 March 2026 the court denied Workday's motion to dismiss the ADEA claim³. It held that job applicants may bring disparate impact claims under the ADEA, following Rabin v. PwC, and said that holding "is not contingent on deference to agency interpretation". It added that the EEOC's long-standing reading, that these provisions cover applicants, is persuasive under Skidmore. The same order dismissed the California FEHA counts with leave to amend, because the complaint lacked allegations of a California nexus³.
2. On 24 June 2026 the court partly vacated a magistrate judge's refusal to compel production of Workday's customers' data and remanded the question of whether Workday has possession of it⁵. The dispute is about whose data the evidence sits in, which matters to any employer relying on a vendor.
3. On 2 July 2026 the court refused to certify an interlocutory appeal of the applicant ruling⁴. It accepted that the question has substantial ground for difference of opinion, but found that an immediate appeal would not "materially advance the ultimate termination of the litigation", and said that clarity "is best pursued through a post-judgment appeal"⁴.

The applicant disparate impact question is not settled law. The trial court has ruled for the plaintiffs and has also said reasonable judges could differ. A court of appeals will not answer it until after judgment.

None of the orders read for this brief finds that any Workday tool produced a discriminatory result. They decide what claims may proceed, and what evidence must be produced.

What the federal policy changes, and what it does not

Executive Order 14281, published at 90 FR 17537 on 28 April 2025, directs that agencies "shall deprioritize enforcement of all statutes and regulations to the extent they include disparate-impact liability", naming Title VII among them⁷. Section 6(c) required agencies to evaluate within 90 days "existing consent judgments and permanent injunctions that rely on theories of disparate-impact liability"⁷.

The order governs agencies. It does not mention private lawsuits, and the Mobley ruling on ADEA applicants came nearly a year after it^3,7. Nothing opened for this brief shows whether the iTutorGroup decree was reviewed under section 6(c). That decree rested on a rule naming ages, which on its face is a different theory from disparate impact. That reading is ours, not the court's or the EEOC's.

The practical consequence is a shift in who is likely to bring a case. An EEOC action over a subtle scoring model is less probable than it was. A private collective action is the route that has actually produced rulings.

Local law shows a similar gap. New York City requires bias audits of automated employment decision tools, but the New York State Comptroller's audit of 2 December 2025 found that the city's enforcing department received only two complaints between July 2023 and June 2025⁸. A duty that exists is not the same as a duty that is policed.

Where the record stops

No employment tribunal decision on an algorithmic hiring tool was found in the research behind this brief, and it does not cover UK or EU tribunals. The Mobley docket was read through the July 2026 orders; later entries were not checked.

What to do

Begin with the one settled point. Check whether any screening configuration, in-house or bought, uses age, graduation dates or birth-date fields as a filter, and remove them. Then treat the vendor as a source of evidence you may need: ask for selection-rate data by age band in your contract, because Mobley shows that whose data it is can become the contested question. Do not read federal deprioritisation as a defence, since it leaves private ADEA claims untouched. And stop assuming that a bias-audit law is being enforced: audit as if it will be tested in a private case.