What to tell legal

In short

Decide what your terms, privacy notice and consent rules say about agents acting for customers, and who signs off the wording. Without a position, platform defaults decide for you. Legal needs to know which agents you let in, which steps always need the customer's consent and what you refuse, such as training on your data.

The decision

Decide what your terms, privacy notice and consent rules say about agents acting for customers, and who signs off on that wording.

Who decides: Legal, with the head of digital and the data protection lead where there is one.

The options

  1. Write agent rules into terms of useStates who may act for a customer and how; Amazon relied on its conditions of use when it blocked Muse. Retail Gazette: Amazon blocks Meta's Muse (22 Sep 2026), read 4 Nov 2026.
  2. Require consent at the sensitive stepZocdoc requires explicit patient consent before an agent books, changes or cancels. Zocdoc for Agents (markdown), read 4 Nov 2026.
  3. Say nothing yetPlatform defaults decide for you; Shopify and Microsoft enrolment settings are examples. Shopify Help Center: Meta agentic storefront, read 4 Nov 2026.

What we found

How to decide

  • Bring legal the list of agent surfaces you are on and the position from the bot and checkout decisions.
  • Name the steps that always need the customer: signing, sharing confidential documents and payment.
  • Decide whether the terms say who may act for a customer, and how you refuse an agent that does not identify itself.

Where this shows up

Sources

  1. Retail Gazette: Amazon blocks Meta's Muse (22 Sep 2026) (retailgazette.co.uk/blog/2026/09/amazon-blocks-metas-new-ai-shopping-agent-from-its-website), read 4 Nov 2026.
  2. Zocdoc for Agents (markdown) (zocdoc.com/business/welcome-agents.md), read 4 Nov 2026.
  3. Shopify Help Center: Meta agentic storefront (help.shopify.com/en/manual/online-sales-channels/agentic-storefronts/meta), read 4 Nov 2026.
  4. Healthcare Dive: Zocdoc invites AI agents (28 Oct 2026) (healthcaredive.com/news/zocdoc-invites-ai-agents-to-book-appointments-on-behalf-of-patients/873035), read 4 Nov 2026. Reported by trade press.
  5. Cloudflare: Disallow AI Training, Accountable crawlers (15 Sep 2026) (blog.cloudflare.com/accountable-mixed-use-ai-crawlers), read 4 Nov 2026.

Last reviewed