The UK’s DRCF members—CMA, FCA, ICO, and Ofcom—issued a joint statement that greater autonomy for personal AI agents does not reduce organizations’ existing legal obligations. Competition, consumer protection, data protection, financial-services, and online-safety rules may apply depending on the service. Businesses should explain when an agent acts for a user, what authority and data it uses, any commercial interests influencing recommendations, and routes to redress. This is not new legislation: responsibility still depends on the organization’s role, service design, and specific facts.