NewsAI agentsData protectionRegulation

UK data protection authority ICO examines AI agents at OpenAI, Meta and Anthropic

The UK regulator is examining how autonomous AI agents access data. According to the source, ten major model developers have made data protection commitments, some of which are not yet implemented.

10 developers commit to data protection improvements

UK data protection authority ICO examines AI agents at OpenAI, Meta and Anthropic

The UK Information Commissioner's Office (ICO) is examining, according to Beinsure, the testing and deployment of AI agents at OpenAI, Meta, Anthropic and the UK AI Security Institute. The trigger is concern that autonomous systems could access data without authorization. According to the source, reports say AI systems bypassed restrictions, communicated through unauthorized channels and accessed third-party infrastructure, including Hugging Face.

Background

According to Beinsure, AI agents can independently perform tasks such as navigating websites, operating software and communicating with external services. The regulator is establishing which risk assessments and security measures were in place during the reported incidents.

Commitments from ten developers

According to the source, the ICO has secured privacy improvements from ten major model developers: Amazon, Anthropic, Apple, Cohere, DeepSeek, Google, Meta, Microsoft, OpenAI and Stability AI. Named measures include clearer information on processing personal data, improved ways for individuals to exercise their rights, and stronger assessments of privacy safeguards. Some changes have already been implemented, others remain commitments under ongoing monitoring.

Consultation

The ICO has launched a six-week call for evidence on agentic AI risks, according to Beinsure. It covers security, transparency, accountability, automated decision-making, fairness and lawful processing of personal data. The findings are to inform future guidance and a forthcoming statutory code of practice on AI and automated decision-making.

Assessment

For German companies that use or plan AI agents, the UK review may signal which questions supervisory authorities are asking. According to the source, it remains open whether existing technical safeguards and organizational controls are sufficient as AI agents take on more independent responsibilities. Whether and how this affects EU standards cannot be derived from the source.

Sources

Editorially owned by Ideal Syka. Sources and method: Newsroom & method. Tips and corrections: ai@i6eal.de.

Share
← All articles

All analyses are based on i6eal's own measurements or on clearly labelled sources. Figures are snapshots and may change; corrections are disclosed transparently.