InfoWorld reported on 6 November that UK digital regulators have warned firms they cannot blame their own AI agents for errors. The warning came in a joint statement from the Digital Regulation Cooperation Forum (DRCF). The DRCF brings together the Competition and Markets Authority, the Financial Conduct Authority, the Information Commissioner's Office and Ofcom. It said existing law already covers personal AI agents, including competition, consumer, data protection, financial services, payments and cyber security rules. It added that an agent's autonomy does not lessen the duty of the organisation that deploys it.
The DRCF also told firms to think about three things. Users should be able to tell when an agent acts for them. It should be clear how the agent gets its authority. And firms should be careful with the personal data the agent uses. InfoWorld did not report any new rules, penalties or deadlines, or any specific case. It did say legal uncertainty remains. It cited a Gartner warning of more legal challenges over decisions made by AI. It also said the four regulators asked for input a few weeks earlier on their work plan, to avoid overlap between their regimes.
For people who build or buy agents that buy things or deal with businesses for customers, the message is plain. Legal responsibility stays with the company that deploys the agent. How an agent shows its actions, gets its authority and handles personal data falls within what the regulators say firms should consider.