Four of the UK’s main digital regulators have said, in a joint statement, that the law already applies to personal AI agents, meaning software that acts for a person by making purchases or contacting businesses. The statement is dated October 30, 2026, and came from the Competition and Markets Authority (CMA), the Financial Conduct Authority (FCA), the Information Commissioner’s Office (ICO) and Ofcom, who work together as the Digital Regulation Cooperation Forum (DRCF).
What the statement says
In “Protecting people and businesses in an agentic economy”, the regulators welcome the technology but warn that agents may amplify existing risks and add new ones. They name fraud and scams, personal information being shared in ways users do not expect, and misleading recommendations, decisions or information.
The central message is that no new rulebook is needed to hold firms to account. The statement lists competition, consumer and data protection law, online safety, financial services, payments and cyber security requirements as already applying, and notes that other areas, such as product safety, sit outside the four regulators’ remits but still apply. It also says an agent’s autonomy does not reduce the responsibility of the organisations that deploy it. Where the regulators reasonably suspect a breach that risks harm to consumers or businesses, they say they will not hesitate to use their powers.
Questions firms are told to answer
The statement asks firms that develop or deploy personal agents to think about six points:
- How consumers can understand when and how an agent acts on their behalf.
- How authority to act is given to the agent.
- How personal data is used.
- How commercial interests that may influence the agent’s recommendations are communicated to users.
- Who is accountable for the agent’s decisions.
- How people can get redress when something goes wrong.
These are prompts rather than formal obligations. A report on the statement reads them as a checklist firms could document before launch, which is a sensible reading but the report’s interpretation, not the regulators’ instruction.
What the regulators say they are doing
The DRCF says it is tracking market developments, engaging directly with firms building and deploying agents, publishing guidance, sharing intelligence and evidence across regulators, supporting innovation through regulatory sandboxes and coordinating at leadership level. The four bodies are also working with the government to find compliance gaps and further regulatory challenges. Firms are strongly encouraged to come forward early to test products and raise questions.
What it means for businesses and consumers
For a business that sells through, or builds, an AI shopping or booking agent, the practical point is that existing consumer-protection and data-protection duties follow the product. Saying “the agent did it” is not a defence under this statement. Disclosure of any commercial relationship behind a recommendation is one of the points firms are told to consider.
For consumers, the statement is not a new right and does not create a new complaints route. It does signal where regulators expect firms to be clear: who the agent works for, what it is allowed to spend or send, and how to get a problem fixed. Anyone letting an agent make payments should check what limits and confirmations the product offers and what the provider says about redress.
What is not covered
The statement announces no investigation, fine or deadline, and it does not name any company or product. It is dated October 30, so it is a little over a week old, and the regulators say their work with government on gaps is continuing. For a related look at how governments are handling AI oversight, see our report on the DOJ super intelligence task force.
Sources
- DRCF: Protecting people and businesses in an agentic economy (joint statement, 30 October 2026)
- Resultsense: UK regulators say existing law applies to personal AI agents
Like our coverage? Add stepphase.com as a preferred source on Google to see more of our stories in Top Stories.
