TL;DR

The UK’s Information Commissioner’s Office has published a Tech Futures report predicting that personal AI shopping agents could arrive within five years. These “AI-gents” would autonomously manage purchases, negotiate prices, and check budgets. The ICO emphasises that data protection must keep pace with these developments.

The Rise of Agentic Commerce

The ICO’s new report outlines how agentic artificial intelligence could fundamentally transform consumer behaviour. Unlike current AI assistants that respond to prompts, agentic AI systems can make decisions, interact with their environment, solve problems in real time, and mimic reasoning and planning.

So-called agentic commerce would see customers’ personal AI agents anticipating shopping needs and making proactive purchases based on learned preferences, behaviours, and knowledge of upcoming plans—without requiring specific instructions.

Capabilities of Future AI Agents

The report describes digital shopping companions that could check personal bank accounts to ensure purchases fit within monthly budgets, assess impacts on other spending plans, schedule purchases around seasonal sales, and negotiate prices directly with sellers.

These capabilities might even extend to sourcing tailored financing options for larger purchases, presenting options to human shoppers for final approval.

Data Protection Concerns

William Malcolm, the ICO’s Executive Director of Regulatory Risk and Innovation, emphasised the need for robust data protection foundations. “Agentic AI will have the capacity to make decisions and take actions independently,” he noted. “Our own personal AI agents could be paying for goods, booking flights and helping with household finances.”

The public needs assurances that their personal information remains secure and well managed before placing trust in agentic systems. The ICO has committed to actively monitoring advancements throughout 2026 and working with AI developers to ensure compliance with data protection requirements.

Looking Forward

For UK businesses, agentic commerce presents both opportunities and challenges. Companies may need to adapt their digital infrastructure to interact with AI agents rather than human customers. Strong data protection practices will be essential for building consumer trust in these new systems.