Category: Regulatory | Reading time: 2 min
The four members of the UK's Digital Regulation Cooperation Forum (DRCF), the Competition and Markets Authority, the Financial Conduct Authority, the Information Commissioner's Office and Ofcom, published a joint statement on October 30 on protecting people and businesses in an agentic economy. The statement is now circulating widely in legal and policy newsletters.
What the regulators said
The regulators said they want to be "explicit" that existing legal and regulatory frameworks apply to personal AI agents, including competition, consumer and data protection law, online safety, financial services, payments and cyber security requirements. Their central line: "An AI agent's autonomy does not diminish the responsibility of organisations that deploy it to comply with applicable law and relevant regulation." They added that where they reasonably suspect a breach that risks harm, they "will not hesitate to use our powers."
The questions firms are expected to answer
The statement asks firms developing or deploying personal agents to think through:
- how consumers can understand when and how an agent acts on their behalf - how authority to act is given - how personal data is used - how commercial interests that may influence recommendations are communicated - who is accountable for the agent's decisions - how to obtain redress when something goes wrong
What it is, and isn't
The statement creates no new rules and names no enforcement case. It describes coordination already underway, including guidance, intelligence sharing and regulatory sandboxes, and encourages firms to engage and test products with the regulators early. Separately, the ICO's call for evidence on agentic AI closes November 20.
Why it matters
Four regulators covering competition, finance, data and online safety have said in one document that "the agent did it" is not a defense. Questions such as how authority was given and who is accountable can only be answered with records of what each agent was permitted to do and what it actually did.
Source: DRCF joint statement (Oct 30) | Statement PDF | GOV.UK: Agentic AI and consumers