Enterprises must take blame for their AI agents’ mistakes, say regulators

The UK’s digital watchdogs have issued a stern warning to enterprises that they cannot escape legal liability by shirking responsibility for AI agents’ mistakes. According to the Digital Regulation Cooperation Forum (DRCF), which includes the UK’s Competition and Markets Authority (CMA), Financial Conduct Authority (FCA), Information Commissioner’s Office (ICO), and communications regulator Ofcom, these autonomous agents have the potential to revolutionize how people utilize digital services, interact with markets, and spur innovation.

However, the DRCF cautioned that firms developing or deploying personal AI agents must carefully consider how consumers comprehend the agent's actions, the authority granted to act on their behalf, and the utilization of their personal data.

The DRCF made it clear that existing legal and regulatory frameworks, including competition, consumer, and data protection laws, online safety, financial services, payments, and cybersecurity requirements, continue to apply to personal AI agents. The organization emphasized that an AI agent's autonomy does not absolve the organizations deploying it from their responsibility to comply with applicable laws and relevant regulations.

The uncertainty surrounding the legal position of autonomous AI agents is evident, as companies are increasingly facing legal challenges over AI-induced decisions, according to Gartner. Attorneys have also grappled with gray areas in AI governance. Just a few weeks prior, the four UK regulators issued a call for input on their 2027-2028 work plan, seeking to address potential overlaps and uncertainties in their respective regulatory regimes.