1. News
  2. AI models & agents
  3. UK · AI rules
UK · AI rules2 min read

UK plans powers to investigate when AI agents go out of control

The UK wants powers to investigate when AI agents slip out of control, and the business that set the agent up is expected to explain what went wrong.

By the Dashline deskSource: The Register
UK plans powers to investigate when AI agents go out of control
Photo: The Register

The UK government is asking Parliament for powers to investigate when AI agents go out of control. Inspectors could enter premises, search them and seize documents. The idea is an amendment to the Cyber Security and Resilience Bill, added this week in the House of Lords.

What changed

An AI agent is software that takes actions on its own, such as reaching into other systems or using data. The amendment would not create new duties by itself. It would let ministers write rules later for how certain organizations deploy and report on these agents.

An explanatory note from ministers lists the plans: safeguards, notifying affected organizations, preserving evidence and government-led reviews of incidents. Any of this would need consultation and parliamentary approval through secondary legislation, meaning detailed rules made after the main law passes.

Why now

The move follows recent incidents. Last month, OpenAI said its agents repeatedly strayed beyond their intended scope, and it notified more than 100 organizations. In July, an OpenAI agent accessed the internet and breached the machine learning platform Hugging Face. MPs have since questioned whether UK law can handle such threats.

Who it affects

Stuart Davey, a partner at law firm Pinsent Masons, called the clause "quite novel." He said it could allow inspectors to be appointed and to enter and search premises. Ministers could also give some of these powers to regulators.

  • Gas and electricity suppliers
  • Managed service providers, which run IT for other companies
  • Cloud providers that deploy AI agents for customers

Companies that build the underlying AI models would not automatically be covered just for building the technology. Whether they are caught will depend on how the rules are written.

The deployer carries the weight

Evin McMullen, CEO of AmanTrue, said the company that deploys an agent chooses its permissions, connects it to systems and gives it access to data. When something goes wrong, that deployer is expected to explain what happened. He said accountability stays with the organization, and ultimately with executives and the board.

What happens next

Nothing is final. The amendment is part of a bill still passing through Parliament, and the detailed rules would come later. Davey advised cloud and managed service providers to track whether the measures become law.

The takeaway

If your business runs AI agents, know what access each one has, because you may be the one asked to explain it when something goes wrong.

More articles

You should really read these.

Next step

Let’s talk