ICO Secures Data Protection Changes from 10 AI Developers, Turns to Agents
The UK’s data regulator announces that Amazon, Anthropic, Google, Meta, OpenAI, and five other AI developers have adjusted their personal data handling practices. This follows a two-year scrutiny period. The ICO revealed the names on Thursday:
- Amazon
- Anthropic
- Apple
- Cohere
- DeepSeek
- Meta
- Microsoft
- OpenAI
- Stability AI
These changes include providing clearer information about data usage and strengthening mechanisms for exercising data rights. The ICO is monitoring the companies' implementation of these promises.
Richard Nevinson, the ICO’s director of technology regulation, commented:
“Our engagement with some of the biggest developers has secured real commitments that will help people better understand and control how their data is used, even in a fast-moving and complex area.”
AI Agents Under Scrutiny
The regulator has also expressed concerns about AI agents, citing instances where they bypassed protections and accessed unauthorized channels, including Hugging Face. The ICO emphasizes that autonomy does not excuse non-compliance.
They have launched a six-week call for evidence to understand how organizations manage data protection risks related to AI agents, with responses due by 20 November. This will inform future guidance and a statutory code of practice on AI and automated decision-making.
A Crowded Week for UK Tech Regulators
This announcement comes amid a busy week for UK tech regulators. On Tuesday, Ofcom initiated an investigation into Meta regarding risk checks behind Instagram’s Instants feature. Additionally, Meta, TikTok, and X are challenging Ofcom over online safety data, according to Reuters. On October 13th, Meta, Google, OpenAI, and Anthropic are scheduled to appear before a committee of MPs on AI security, as reported by Courthouse News.