Ask NostroAskSubscribe

UK regulators say firms stay liable for their AI agents' actions

For the general counsel at a US bank

The Digital Regulation Cooperation Forum, which comprises the UK's CMA, FCA, ICO and Ofcom, said in a joint statement that businesses cannot avoid legal responsibility by blaming errors on AI agents they have deployed; the sources do not give the statement's date.1

The DRCF said personal AI agents act for users, for example by making purchases and communicating with businesses, and that it wants to be explicit that existing legal and regulatory frameworks apply to them.1

The DRCF listed competition, consumer and data protection law, online safety, financial services, payments and cyber security requirements as applicable, according to Computerworld's report of the statement.1

The DRCF said: "An AI agent's autonomy does not diminish the responsibility of organisations that deploy it to comply with applicable law and relevant regulation."1

It advised firms developing or deploying personal agents to consider how consumers can understand when and how an agent acts for them, how authority to act is given and how personal data is used.1

Computerworld reported that the four regulators issued a Call for Input on their work plan a few weeks earlier, to reduce overlap and uncertainty about how their regimes interact; the article gives the plan period as "2027-27".1

Why it matters

For banks and fintechs, a customer's AI agent acting on an account does not shift liability away from the firm that deploys or accepts it. Records of what each customer authorised, and of how data was used, are likely to be the main evidence in any dispute. This is UK guidance, so it does not bind US institutions directly, but it matters for UK operations.

From the brief

Our take. Four UK regulators, the FCA among them, just said an agent's autonomy does not shrink the deployer's duty. If your agent terms quietly move errors onto the customer, you are betting US regulators will read it differently.

Action. Legal and compliance: Check customer agreements for clauses assigning AI-agent errors to customers, and record the authority each customer grants an agent.

Sources

  1. ReportEnterprises must take blame for their AI agents’ mistakes, say regulators – Computerworld Computerworld
  2. Primary sourceGoogle News - Computerworld - Recent Google