UK regulators scrutinise agentic AI as MPs seek stronger safeguards

The Information Commission’s Office (ICO) is seeking evidence on how data protection law applies to agentic AI, warning that larger-scale, more complex personal data processing can create security and data minimisation risks. The consultation covers transparency, accountability, automated decision-making, fairness and lawful processing, and closes on 20 November. Findings will inform future guidance and a statutory code of practice.

The ICO has also set out expectations for foundation model developers, stressing lawful and transparent data use and safeguards embedded from the outset. It will continue scrutinising reliance on legitimate interests and examining special category data. Personalised consumer chatbots, including companion services, are a regulatory priority, while agentic AI in advertising technology is also under review.

A House of Commons committee has launched an inquiry into AI adoption, safety and governance, examining responsibility for harm, contractual remedies, self-regulation and the AI Security Institute’s powers. Separately, the Joint Committee on Human Rights has called for a dedicated, risk-based AI bill, prior approval for systems posing high human rights risks, supply-chain due diligence and mandatory transparency. It also recommends prohibiting uses inconsistent with human rights and establishing independent statutory oversight.

The European Commission is consulting on copyright and AI, including the use of protected content, research and online piracy. It is assessing whether further measures are needed and gathering views on policy options. Responses close on 3 November.