Responsibility stays with organisations
The ICO’s agentic-AI report stresses that using an agent does not remove responsibility for processing personal information. It considers risks involving excessive access, unexpected uses of data and inaccurate information spreading through connected tools or agents. [1]
Access is a design decision
The report discusses controls over what information and tools an agent can access, with human review where appropriate. It also considers how people can understand and contest significant automated decisions. This is research and risk analysis; its older timetable references should not be treated as a current publication schedule. [1]
ADM perspective
Start with a bounded purpose and ask what access is necessary to achieve it. Then test what happens when the agent is wrong: who notices, who can stop it, and how the affected person gets an effective response.
Read the original sources
The original publications provide the full detail, evidence and limitations.
- Information Commissioner’s Office · Regulator researchICO tech futures: Agentic AI — data protection and privacy risks
An AI-assisted, source-led summary. “ADM perspective” is editorial interpretation, separate from the source’s findings. Our editorial approach.