What happened
Two legislative proposals introduced in the United States this summer – the federal AI AGENT Act and California Senate Bill 1106 – aim to define “agentic AI” and impose obligations on consumer‑facing agents, with differing scopes and technical criteria.
Why it matters for trust and compliance
- Its status is proposed. It is not law yet. Track it, but do not treat it as an obligation.
- The bills signal the first U.S. attempts to regulate AI agents, affecting privacy, data access, and consumer protection.
- It relates to CCPA/CPRA. The regulations library explains what that law requires.
Who is affected
technology financial services retail developer deployer platform
Recommended actions
- Review consent, cookie and tracking practices against the requirement.
- Check that privacy notices describe the practices this addresses.
- Revisit retention schedules and data minimisation for the data involved.
- Map the security requirements to existing controls and close gaps.
- Inventory AI or automated decision systems in scope and their assessments.