What to tell legal
In short
Decide what your terms, privacy notice and consent rules say about agents acting for customers, and who signs off the wording. Without a position, platform defaults decide for you. Legal needs to know which agents you let in, which steps always need the customer's consent and what you refuse, such as training on your data.
The decision
Decide what your terms, privacy notice and consent rules say about agents acting for customers, and who signs off on that wording.
Who decides: Legal, with the head of digital and the data protection lead where there is one.
The options
What we found
- 28 Oct 2026
Healthcare Dive reported that Zocdoc bars registered agents from training on, reselling or republishing its data.
- 15 Sep 2026
Cloudflare publishes the no-training preference in robots.txt through its Disallow AI Training setting, launched 15 September 2026.
How to decide
- Bring legal the list of agent surfaces you are on and the position from the bot and checkout decisions.
- Name the steps that always need the customer: signing, sharing confidential documents and payment.
- Decide whether the terms say who may act for a customer, and how you refuse an agent that does not identify itself.
Where this shows up
- Self-check question 17Are your returns, cancellation, privacy and terms pages public, current and readable without logging in?
- Self-check question 18Is there a named person in your business who owns how AI agents are treated on your site?
- The healthcare guideAppointment booking through Zocdoc, Gemini and Amazon Health AI, with patient consent rules.
- The professional services guideAssistants that call firms, fill quote forms and collect availability.
- The financial services guideComparison and quote apps inside ChatGPT that hand off to the firm's own site.
Sources
- Retail Gazette: Amazon blocks Meta's Muse (22 Sep 2026) (retailgazette.co.uk/blog/2026/09/amazon-blocks-metas-new-ai-shopping-agent-from-its-website), read 4 Nov 2026.
- Zocdoc for Agents (markdown) (zocdoc.com/business/welcome-agents.md), read 4 Nov 2026.
- Shopify Help Center: Meta agentic storefront (help.shopify.com/en/manual/online-sales-channels/agentic-storefronts/meta), read 4 Nov 2026.
- Healthcare Dive: Zocdoc invites AI agents (28 Oct 2026) (healthcaredive.com/news/zocdoc-invites-ai-agents-to-book-appointments-on-behalf-of-patients/873035), read 4 Nov 2026. Reported by trade press.
- Cloudflare: Disallow AI Training, Accountable crawlers (15 Sep 2026) (blog.cloudflare.com/accountable-mixed-use-ai-crawlers), read 4 Nov 2026.
Last reviewed