Still, I'm struggling to imagine how "Thank for you applying, but this position has been filled/cancelled" could expose a company to a lawsuit. You'll eventually assume you weren't hired after a while anyway...