UK privacy regulator wins changes from ten AI developers and opens inquiry into AI agents
The UK Information Commissioner's Office says ten major foundation model developers have made or committed to data protection changes after its supervision. It also launched a six-week call for evidence on the privacy risks of agentic AI.

The Information Commissioner's Office published a report on October 8 saying that ten of the largest foundation model developers operating in the UK have made, or committed to make, data protection changes following its scrutiny. The companies named are Amazon, Anthropic, Apple, Cohere, DeepSeek, Google, Meta, Microsoft, OpenAI and Stability AI.
The report also sets out the regulator's positions on issues such as how special category data can be used lawfully and whether foundation models themselves may contain personal data.
Alongside the report, the ICO launched a six-week call for evidence on how organisations are managing the data protection risks of agentic AI, with responses due by 20 November 2026. The regulator also confirmed it has made enquiries with OpenAI, Anthropic, Meta and the UK AI Security Institute about recent agentic AI testing and deployment. It says the evidence will feed into future guidance and a planned statutory code of practice on AI and automated decision-making.