UK regulators say personal AI agents do not remove company responsibility
The CMA, FCA, ICO and Ofcom issued a joint statement on personal AI agents on October 30. They say companies remain responsible for legal compliance when software acts on a user’s behalf.
Spec sheet
- Regulators
- 4: CMA, FCA, ICO and Ofcom
- Forum
- Digital Regulation Cooperation Forum
- Scope
- Personal AI agents
- Legal basis
- Existing legal and regulatory frameworks
The statement asks developers and deploying firms to address how users grant an agent authority and understand its actions. It also covers personal-data use, commercial influences on recommendations, accountability for decisions and routes to redress. These questions apply to the surrounding product and business process, including how a user can resolve an unwanted transaction.
The regulators describe a coordinated approach under existing law. The CMA’s associated consumer research was first published in March; its October update links the new joint statement.
Claim check
Sources
- Joint statement on protecting people and businesses in an agentic economy, October 30, 2026 · Digital Regulation Cooperation Forum · 30 Oct
- Joint statement full text, October 30, 2026 · CMA, FCA, ICO and Ofcom · 30 Oct
- Agentic AI and consumers: March 9 research and October 30 joint-statement update · Competition and Markets Authority · 30 Oct