Products Lemma APIProof issuance & verification platformTrust402Delegate to agents, and transactSealSign-in for the agent era — no keys handed over
Use cases Manufacturing & Critical InfraInspection Record AssuranceFinance & FinTechCounterparty Record VerificationPublic SectorCertificate-less ProceduresHealthcareQualified Worker AssuranceProcurement & Supply ChainSupplier Credential MonitoringMedia & ContentContent AuthenticityService & RetailCross-group IdentityAI Adoption (cross-industry)AI Run GovernanceDevelopers & Agent OpsAgent Authority Control ▸ Browse the use-case index
Pricing
Resources Critical BriefThe frontier of AI × trustBlogThinking and implementation notesDocumentationAPI & specsVerification CenterReal verification & issuance countsAbout usFRAME00, Inc.ContactSales & press inquiriesGlossaryDefinitionsFAQFrequently asked questions
Dashboard ↗ JA
Home / Critical Brief / No. 115
No. 115 Critical Brief · Verifiable AI

Workday: A lawsuit alleges its AI applicant screening sorted candidates unfavorably by race, age and disability (Mobley v. Workday)

100+openings
Openings the lead plaintiff says he was rejected for at companies using Workday (plaintiff's allegation)
Within 1hour
Time from applying to an automated rejection notice; some also arrived late at night (plaintiff's allegation)
2023-02→2026-06-22
From filing to the federal court allowing the FEHA claims and part of the ADA claims to proceed
CountryUS
Incident date2026-06-22
Published2026-07-31
AuthorsLemma Critical Team
Contents
  1. 01Summary
  2. 02What got through
  3. 03Pre-execution check
  4. 04What Lemma does
  5. 05Facts and timeline
  6. 06Sources

Summary

In a class action, plaintiffs allege that an AI applicant-screening service sorted candidates unfavorably on the basis of race, age and disability across its customers’ hiring. In June 2026, the federal court rejected part of Workday’s defense that it “merely provided a tool” and allowed part of the claims to proceed. The court has not yet decided whether discrimination occurred. Without a check, before an AI decision is used against a person, for the decision’s grounds and who reviewed it, only the outcome arrives, and the grounds cannot be shown afterwards.

Figure 1"Detection" versus a "pre-execution check"

Pre-execution check = before using an AI decision for a rejection, check that it is tied to a record of its grounds and the reviewer's approval, and keep a record. Detection = noticing a problem after the rejection, through complaints or analysis. Dates are those given in court orders and law-firm analyses.

Pre-execution check · not known from what was disclosedWhether grounds and review were checked before rejections were sent
What was allegedRejected for 100+ openings
Automated rejections within an hour or late at night (plaintiff's allegation)
Detection · worked after the rejectionsAn applicant's complaint reached the court as a class action
2023-02
Mobley files suit
2025-05
ADEA collective preliminarily certified
2026-05-29
Motion to compel testing data denied
2026-06-22
Part of the claims allowed to proceed

What got through

What got through
Rejection notices sent to applicants. The plaintiff alleges he was rejected for more than 100 openings at companies using Workday’s platform, receiving automated rejections within an hour of applying or in the middle of the night (plaintiff’s allegations).
What reached the receiving side
In general, what reaches an applicant is the outcome, not which decision was used or on what grounds. Plaintiffs allege that applicants were sorted through proxies, such as employment gaps, in ways that produced disadvantage correlated with protected attributes.
What was alleged and what the court decided
On 2026-06-22, Judge Rita F. Lin held that Workday is not merely a “tool provider” but may fall within the reach of discrimination liability, and allowed the FEHA claims and part of the ADA proxy-discrimination claims to proceed. The ruling declined to dismiss those claims; it is not a finding that discrimination occurred.
Not disclosed
The factors the decisions used, and whether a person or a separate layer reviewed a decision before a rejection was sent. They are not in the sources reviewed. A May 2026 order found Workday’s bias-testing data protected by privilege, and its production to plaintiffs was not compelled.

Pre-execution check

The condition that holds regardless of the route is to check, before an AI decision is used to return an adverse outcome to a person (such as a rejection), that the decision is tied to a record of its grounds and to the approval of the person who reviewed it.

The core of this case
Without a check, before an AI decision is used against a person, for the decision's grounds and who reviewed it, only the outcome arrives, and the grounds cannot be shown afterwards.
Who approves
The hiring staff who decide an action such as a rejection. They approve after looking at the grounds, separately from the AI decision. A decision looking fast and consistent is no substitute for approval.
Where it is checked
Before a rejection based on an AI decision is sent. Check that the decision is tied to a record of its grounds and to approval; if it is not, hold.
What is recorded
Which decision was used, with which inputs and conditions, and under whose review. In an audit or litigation, the basis for the action can be shown afterwards.

The suspected disadvantage was taken up only after rejections arrived, through litigation. Other cases where an AI output allegedly led straight to harm to a person without independent corroboration are the wrongful arrests of Robert Williams and Robert Dillon (facial recognition) and TennCare Connect (benefit-eligibility decisions). In hiring, there is McHire (applicant-data exposure).

What Lemma does

Lemma builds the pre-execution check into the step that sends a rejection based on an AI decision. It does not judge whether the decision itself is fair; before the rejection is sent, and outside the AI, it checks that the decision is tied to a record of its grounds and the reviewer’s approval, and keeps a record.

Industries and operations to watch

IndustryAI adoption
Companies that build AI screening into sorting applicants or routing pass/fail decisions, and the vendors that provide it.
OperationsApproval
Approving an action such as a rejection whose basis is an AI decision.

Current controls versus Lemma

The route in this case is column 1 (sending applicants a rejection based on an AI decision). Column 2 is the stage, after the rejection, of showing in an audit or litigation which decision was used under whose review.

ControlSending applicants a rejection based on an AI decisionShowing the decision’s grounds and review after the rejection
Bias testing of the model (evaluating group-level tendencies)PartialPartial
A practice of having a person review the decision before a rejection is sentEffectivePartial
Lemma (pre-execution check)EffectiveEffective

Bias testing underpins choosing and revising a model, but it does not change whether each individual decision was reviewed before it was sent. In this case, Workday’s bias-testing data was found protected by privilege and was not produced to plaintiffs in the litigation. A human-review practice acts on the step before sending, but the record of the review stays inside the organization that runs it. Lemma checks, before sending and outside the AI, that the decision is tied to a record of its grounds and to approval, and keeps which decision was used under which conditions and review.

Note: Lemma’s check works only when it is built into the step that sends a rejection, and the record of grounds and the approval are managed outside the AI that produces the decision. If the reviewer does not notice bias in a decision, this check can be passed. Lemma does not guarantee that a decision is fair, nor does it judge whether discrimination occurred. The table compares what each control checks; it does not show whether this case would have been stopped. Lemma does not detect or prevent intrusions.

CheckChecklist

Three things to confirm for organizations that use AI decisions in hiring or other actions

  • Do you pass the inputs and factors an AI decision used (including information that can act as a proxy) to the person who approves the action?
  • When an applicant or other person complains, do you have a record that shows which decision was used for that one case, under whose review?
  • When you use AI screening from an outside vendor, have you decided which side keeps the record of decisions and approvals?

Facts and timeline

Case
Mobley v. Workday, Inc. (N.D. Cal., No. 3:23-cv-00770).
Lead plaintiff
Derek Mobley (alleges he is Black, over 40, and living with anxiety and depression).
Subject of the suit
Workday’s AI applicant screening. A class action alleging it treated candidates unfavorably on the basis of race, age and disability across its customers’ hiring.
Plaintiff’s allegations
Rejected for more than 100 openings, receiving automated rejections within an hour of applying or late at night. Alleges sorting through proxies such as employment gaps.
Court’s ruling
On 2026-06-22, Judge Lin rejected part of Workday’s defense and allowed the FEHA claims and part of the ADA proxy-discrimination claims to proceed.
Current stage
The case is in discovery, with continued disputes over the decision’s grounds and the handling of the testing data.

Glossary
Proxy — Information that is not a protected attribute such as race, age or disability, but tends to correlate with one. Plaintiffs allege that employment gaps and similar factors played this role.
FEHA, ADA, ADEA — FEHA is the California Fair Employment and Housing Act, ADA the Americans with Disabilities Act, and ADEA the US Age Discrimination in Employment Act.
Attorney-client privilege — A US legal principle that shields communications between a lawyer and a client from disclosure in litigation.

Timeline

  • Mobley files suit against Workday in federal district court (No. 3:23-cv-00770, N.D. Cal.).
  • At an early pleading stage, a ruling addresses whether Workday qualifies as an “agent,” and plaintiffs are given leave to amend.
  • Preliminary certification of a nationwide ADEA collective is granted.
  • Magistrate Judge Laurel Beeler denies the motion to compel production of Workday’s bias-testing data, finding it protected by attorney-client privilege, and separately denies compelling customers’ applicant data as failing Rule 34’s “control” requirement.
  • Judge Rita F. Lin rejects part of Workday’s defense and allows the FEHA claims and part of the ADA claims to proceed.

The facts rest on federal-court orders, law-firm analyses and media reporting. The litigation is ongoing, and statements about the disadvantage applicants experienced and the manner of automated rejection include the plaintiff’s allegations. The court has not yet decided whether discrimination occurred. The scope of the collective certification and the details of the figures include unsettled points. This Brief does not blame Workday or the hiring companies. What has not been disclosed does not mean there were no controls.

Response after disclosure

Litigation
The case is in discovery, with continued disputes over the decision’s grounds and the handling of the testing data.
HR and legal practice
Judge Lin’s June order is widely cited as a holding that a provider of AI screening may fall within the reach of discrimination liability beyond that of a “mere tool provider.”

Sources

References: “The last layer left for cyber defense in the age of AI”

The same method elsewhereSee all 30 "Approval & sign-off" cases

This Brief sets out, from disclosed facts, what organisations in a similar position can check. It is not guidance on individual losses or procedures.

This material is a structured analysis of public information; it is not an audit, diagnosis, or recommendation for any specific organization.

Cite this Brief

Lemma Critical Team. (2026).
"Workday: A lawsuit alleges its AI applicant screening sorted candidates unfavorably by race, age and disability (Mobley v. Workday)".
Lemma Critical Brief No.115. Lemma / FRAME00, Inc.
https://lemma.frame00.com/critical/briefs/115-mobley-workday-ai-hiring-bias/
Read nextNext
All Briefs →
Lemma

If it can't be verified,
it doesn't enter your operation.

Lemma is a pre-execution check: logins, payments, records and publishing that look genuine are checked before they run, with cryptographic proofs the receiving side verifies without asking the issuer. Detection stays; the check sits in front of it.