AIWHYS

Industries

Data protection

2 synchronized stories carry this tag.

EnterprisePolicy release

UK privacy regulator secures model changes and opens agent inquiry

The UK Information Commissioner's Office said ten foundation-model developers made or committed to transparency, rights and safeguard improvements after supervision. It also opened a six-week agentic-AI evidence call and confirmed enquiries involving OpenAI, Anthropic, Meta and the UK AI Security Institute after reported agent testing incidents.

Why it matters: The action makes data protection an operational requirement for both model training and autonomous tool use. Developers and deployers now have a public regulator position, a live consultation and clear scrutiny of authorization, external-system access and…

Read storyOriginal source · ico.org.uk
ReliabilityIncident

Spain records its first notified AI-agent data breach

Spain's data-protection authority disclosed its first personal-data breach notification in which an attack was allegedly executed by an AI agent using a known language model. The reported agent searched for weaknesses, authenticated, found a vulnerability, modified personal data and accessed invoices with minimal human intervention.

Why it matters: The incident shows an agent can compress reconnaissance, authentication, exploitation and data manipulation into one chain. Defenders need to correlate identity, API and application events rather than treating model use as a separate telemetry category.

Read storyOriginal source · aepd.es