The Next Domino: Could Shareholders Sue Over AI Hiring Discrimination?

 Employment Testing: Failing to Make the Grade — Ten Years Later, Part 7

The previous two posts examined how automated employment screening systems could expose employers to substantial discrimination claims—and why contractual indemnification from a technology vendor may not provide complete financial protection.

But another question deserves attention.

What happens when corporate directors and officers know about potentially significant legal and financial risks arising from automated hiring practices but fail to address them?

Could shareholders bring legal action against the company's leadership?

Under certain circumstances, yes. The legal requirements are demanding, but the question raises important issues of corporate governance and financial accountability.

Return to the 500,000 Applicants

Consider the hypothetical employer discussed in the previous posts.

A publicly traded corporation uses a third-party automated screening system to evaluate 500,000 job applicants over two years.

The system is subsequently challenged as unlawfully excluding qualified applicants with mental health disabilities. Additional allegations question whether the assessment constitutes a prohibited pre-offer medical examination under the Americans with Disabilities Act (ADA).

As discussed in Post 5, hypothetical aggregate applicant recoveries could reach $125 million to $500 million under specified assumptions about the number of successful claims and average recovery. Those figures illustrate potential financial scale; they are not predictions or estimates of actual liability.

Now suppose concerns about the screening system emerge before the company incurs substantial losses.

Its legal department receives complaints alleging disability discrimination. An internal review questions whether the assessment was adequately validated for the jobs involved. Outside counsel identifies litigation challenging similar screening technology.

The company's management and directors receive reports describing these concerns and their potential financial consequences.

What happens next matters.

The Duty to Oversee Legal Compliance

Under Delaware corporate law, directors owe fiduciary duties to the corporation and its shareholders. Those duties include responsibilities relating to oversight of important legal and compliance risks.

The governing principles are commonly associated with In re Caremark International Inc. Derivative Litigation and subsequent Delaware decisions.

A Caremark claim is not established merely because a company violates the law or suffers substantial financial losses.

Directors are not guarantors against every corporate compliance failure.

Instead, successful oversight claims generally require particularized facts supporting an inference that directors acted in bad faith—for example, by failing to make a good-faith effort to establish appropriate oversight systems or by consciously disregarding serious warning signs of unlawful conduct.

This is a demanding standard.

In a 2026 derivative action involving Boeing, the Delaware Court of Chancery dismissed claims notwithstanding allegations that directors received numerous warnings about aircraft manufacturing problems. The court concluded that the plaintiffs had not adequately established the requirements for excusing demand on the board.

The decision illustrates an important distinction: receiving warnings, responding imperfectly, and consciously disregarding known legal violations are not necessarily the same thing.

The question is not simply whether directors recognized every possible risk. It is whether they fulfilled their fiduciary responsibilities in overseeing and responding to serious compliance concerns.

A Potential Shareholder Derivative Action

Return to the employer screening 500,000 applicants.

Suppose the board receives repeated reports that the company's automated screening system may unlawfully exclude applicants with disabilities.

The reports identify specific concerns about the screening criteria, potential deficiencies in validation, and the possible financial consequences of continuing to use the system.

Suppose further that directors know those concerns have not been meaningfully investigated but consciously decline to establish an appropriate response.

Eventually, the company incurs substantial litigation expenses, settlements, or judgments.

Shareholders might consider bringing a derivative action alleging that directors or officers breached their fiduciary duties and thereby harmed the corporation.

A derivative action is brought on behalf of the corporation. Any recovery generally belongs to the company, rather than being distributed directly to the shareholders bringing the case.

Such litigation faces significant hurdles.

Under applicable corporate law, shareholders ordinarily must first demand that the board pursue the claim or establish that making such a demand would be futile.

They must also satisfy the substantive requirements for establishing a fiduciary breach.

The mere existence of unlawful screening practices or substantial corporate losses would not be enough.

But evidence that directors consciously disregarded serious legal compliance risks could support a different analysis.

When Financial Disclosure Becomes a Separate Issue

Potential employment-discrimination liabilities may also implicate corporate financial reporting.

Suppose management learns that the company faces a potentially material exposure arising from its automated screening system.

Under Accounting Standards Codification (ASC) 450, a company generally must recognize a loss contingency when a loss is probable and reasonably estimable.

When a material loss is reasonably possible but does not qualify for accrual, disclosure may still be required.

Public companies also have applicable securities-law obligations concerning material legal proceedings, known uncertainties, and financial risks.

The existence of litigation involving a screening vendor does not automatically trigger a reserve or disclosure obligation for every employer using its technology.

But the employer must evaluate its own circumstances as relevant information becomes available.

That evaluation may be necessary even before the company itself is named in a lawsuit. The rules governing unasserted claims have specific conditions, and the absence of a filed complaint does not by itself resolve the accounting question.

If material disclosures are required but omitted, the consequences may extend beyond employment discrimination litigation.

Derivative Litigation and Securities Claims Are Different

A critical distinction deserves emphasis.

A shareholder derivative action alleging inadequate board oversight seeks recovery for injury to the corporation and ordinarily involves fiduciary-duty claims.

A direct securities action alleging materially misleading financial disclosures involves different legal requirements and may seek compensation for losses suffered by investors.

Depending on the cause of action, a federal securities-fraud claim may require proof of a material misrepresentation or omission, scienter, reliance, and loss causation.

A misleading disclosure does not automatically establish a Caremark violation.

Likewise, deficient corporate oversight does not necessarily establish securities fraud.

A company might face questions under both bodies of law, but each potential claim requires an independent analysis.

This distinction is important because financial reporting concerns can arise even when the demanding requirements for personal director liability have not been met.

Does Vendor Indemnification Change the Analysis?

Post 6 examined why contractual indemnification from an automated-screening vendor may not fully protect an employer.

A vendor's promise to cover certain losses may be subject to contractual caps, exclusions, disputed obligations, insurance limitations, or insufficient financial resources.

Suppose management assures the board that substantial applicant claims pose little financial risk because the vendor has agreed to indemnify the company.

Has management examined the agreement? Does the protection cover the relevant claims? What happens if other employers assert similar indemnification demands against the same vendor?

These are important questions when the potential exposure is material.

An uncertain indemnification recovery cannot simply be assumed to eliminate the employer's underlying financial risk.

For corporate directors and officers, the question is whether credible information about that risk has been appropriately evaluated and addressed—not whether a vendor agreement exists.

What Should Corporate Boards Be Asking?

Directors need not become experts in artificial intelligence or personally examine proprietary source code.

But when automated employment screening presents a significant compliance risk, corporate leadership should have appropriate processes for evaluating and responding to that risk.

Relevant questions include:

• Has the company identified the automated screening systems it uses and the employment decisions they influence?

• Have the systems been evaluated for their intended uses, including applicable job-relatedness, accessibility, and nondiscrimination requirements?

• Are complaints, adverse-impact findings, and relevant litigation developments reported to appropriate management and oversight personnel?

• Has the company assessed the financial implications of potentially unlawful screening practices and the limitations of vendor indemnification?

• Are material contingent liabilities being evaluated for recognition or disclosure under applicable accounting and securities-law requirements?

The answers will vary depending on the company's size, operations, the nature of the technology, and the significance of the risks involved.

The objective is not to require boards to supervise every hiring decision. It is to ensure that potentially significant legal compliance problems are not overlooked simply because the underlying decisions are made through commercial software.

Workday and the Larger Governance Question

The ongoing lawsuit Mobley v. Workday, Inc. challenges automated applicant-screening practices on grounds that include alleged age and disability discrimination.

Workday disputes the allegations. No final judicial determination of unlawful discrimination has been made.

Nor does the litigation establish that Workday's customers have violated employment laws, failed to make required financial disclosures, or breached their fiduciary duties.

Nevertheless, the case illustrates why employers using widely deployed screening technologies may need to examine their own practices and potential exposure.

The significance for corporate governance is not that liability has already been established. It is that credible legal challenges involving shared hiring technology may present risks that responsible management should evaluate.

The Next Domino

In 2013, this blog warned about the potential consequences of employers relying on commercially developed workforce assessments.

More than a decade later, automated hiring technologies have made those concerns more consequential.

A common screening system can be used to evaluate hundreds of thousands of applicants. If the system violates employment discrimination laws, the consequences may extend across numerous employers.

Contractual indemnification may not eliminate those liabilities. Material financial exposures may require recognition or disclosure. And where corporate leadership consciously disregards serious compliance risks, shareholders may examine whether derivative litigation is warranted.

None of these consequences is automatic. Each depends on the facts and the applicable legal standards.

But the progression is important.

The first domino may be a successful employment discrimination claim.

The second may be substantial financial liability for an employer that relied on the challenged technology.

The next could be litigation brought by the employer's own shareholders.

For corporate leadership, the best response is not to wait for the dominoes to fall. It is to understand the technology, evaluate its legal and financial risks, and establish meaningful accountability for the decisions it helps make.