{"slug": "from-copyright-and-privacy-to-agents-ai-governance-is-racing-to-keep-up", "title": "From Copyright and Privacy to Agents, AI Governance Is Racing to Keep Up", "summary": "Companies are granting AI agents access to files, software and corporate data faster than they are building controls to govern what those agents can see, inherit and reach, governance executives said at the AI Infra Summit in Santa Clara, Calif., on Sept. 18, 2026. Alice Xiang, global head of AI governance at Sony Group Corp., said copyright and consent must be settled at the data layer, warning that \"if you don't address that at the data layer, there's really no way to address that further downstream.\" Sony AI's Fair Human-Centric Image Benchmark, published in Nature in December 2025, covers 10,318 images of 1,981 people across 81 countries and regions, all of whom consented and can withdraw.", "body_md": "[Copyright](https://broadbandbreakfast.com/tag/copyright/)\n\n# From Copyright and Privacy to Agents, AI Governance Is Racing to Keep Up\n\nCopyright and privacy obligations already govern the data, but agentic systems add the problem of preserving identity and accountability as software acts on it own\n\n#### [Akul Saxena](https://broadbandbreakfast.com/author/akul/)\n\nSANTA CLARA, Calif., Sept. 18, 2026 – Companies are giving AI agents access to files, software and company data faster than they are building the controls needed to govern what those agents can see, inherit and reach, governance executives said this week.\n\nThe exposure runs in three layers: Copyright and consent apply when material enters a system, privacy law applies while personal information sits inside it, and accountability becomes the question once an agent acts.\n\n### *Rights get decided before data goes in*\n\nA song, a photograph or a face carries legal rights long before a model produces anything from it. Licensing and consent therefore have to be settled when the material goes in, said **Alice Xiang**, global head of AI governance at Sony Group Corp., the Japanese electronics and entertainment company, speaking on a separate panel at the AI Infra Summit here.\n\n\"If you don't address that at the data layer, there's really no way to address that further downstream,\" she said. The data layer is what a system learns from: the images, text and recordings a company feeds into training.\n\nCopyright law gives an owner the exclusive right to copy a work and to build new works from it, with exceptions such as fair use.\n\nIn the U.S., the Copyright Act of 1976 sets that rule. Protection starts the moment an author fixes original work in durable form, and it covers copying, adapting, distributing, performing and displaying it publicly.\n\nFair use, the exception at Section 107, allows certain uses of copyrighted work without the owner's permission, the kind of work, how much was taken and the damage to the market for the original. It is decided case by case.\n\nThe exception widened for three decades as courts asked whether a use was transformative, the test that cleared Google’s copying of Java code in 2021. The Supreme Court pulled it back in 2023, ruling that a commercial use serving the same purpose as the original is not transformative.\n\nTwo years later, [Judge William Alsup ruled that training a model on lawfully purchased books is fair use](https://broadbandbreakfast.com/judge-dismisses-authors-copyright-lawsuit-against-meta-over-ai-training/), and that keeping pirated copies is not.\n\n### ***Harder problem: Data already collected***\n\n*Harder problem: Data already collected*\n\nFor a result to carry protection, a person has to supply the creative choices, and typing a prompt generally falls short of that.\n\nOld training data is the hardest case. Companies assembled datasets years ago without recording which permissions came with them, and blocking an output today leaves the original collection where it was.\n\nXiang pointed to her own team's answer. Sony AI published the Fair Human-Centric Image Benchmark in the journal Nature in December 2025, drawing on 10,318 images of 1,981 people across 81 countries and regions, every one of whom agreed to be included and can withdraw that agreement.\n\nThat consent is what makes the dataset useful to a company. Sony can show a regulator how it tests its systems and where the test material came from.\n\nThe remaining problem is engineering. Somebody has to write those rights in a form software can read and act on.\n\n### *Privacy problems also start upstream*\n\nPersonal information creates a related constraint that also predates the agent. A company can block an application from showing someone’s data, but that does not undo the collection that put the information into a dataset in the first place.\n\nBiometric information is the clearest example. California’s privacy law treats biometric information used to identify a person as sensitive personal information, alongside categories including precise geolocation and genetic data, and gives consumers rights over how covered businesses collect and use their information.\n\n[The United States still has no comprehensive federal data privacy law](https://broadbandbreakfast.com/california-rep-calls-for-guardrails-as-preemption-fight-shapes-ai-talks/). California’s automated-decision rules begin applying to significant decisions in 2027. In Europe, the General Data Protection Regulation already limits certain solely automated decisions, while the EU AI Act will add requirements for high-risk uses including employment and biometrics beginning in December 2027.\n\nThe arrival of AI retired none of the older obligations. Companies still have to know why they collected information, limit what they take and understand where it goes, said **Ron Whitworth**, chief privacy officer at Truist, a bank holding company. A breach involving AI can still trigger the notification and remediation duties that apply to other technology incidents.\n\nWhat changes is visibility. AI systems can make or contribute to decisions about people without the same level of control or visibility companies had with conventional systems, Whitworth said. His definition of [an AI incident](https://broadbandbreakfast.com/11-ai-bills-cleared-committee-this-summer-but-none-has-reached-the-house-floor/) begins when a use case produces results outside expectations, particularly when those results could affect a consumer or employee.\n\nFor regulated companies, the standard is evidentiary. Records have to show that the controls a company designed are the controls actually running, and businesses should be able to prove that “what you design is exactly what is happening,” Whitworth said.\n\n### *Agent-to-agent work breaks the identity trail*\n\nTracking responsibility gets harder when the software stops answering and starts acting. A single agent action can still be traced to the employee who requested it, said **Nicky Pike**, Americas field chief technology officer at Coder, a developer environment company.\n\nThe trail becomes less reliable when that agent creates subagents, additional AI processes that handle parts of the original task. Each handoff creates another place where the connection between an action and the person who originally authorized it can be lost.\n\nPike pointed to the Model Context Protocol, a standard connecting AI applications to outside tools and data. Some implementations use static keys, reusable credentials that provide access without necessarily identifying which person, agent or subagent initiated each request.\n\nAgents also frequently operate with permissions inherited from the employee directing them, potentially giving the software access to many of the same files, applications and systems available to that worker.\n\n“We’re giving AI way too much authority,” Pike said.\n\nAsked whether any product can preserve that chain of delegated authority end to end, Pike said he had not seen the problem solved. Capabilities are changing every few months, he said, while companies are still working out how to preserve identity as one agent creates another.\n\nThe problem extends beyond one company when agents begin interacting with agents operated by other organizations. Panelists called for interoperability standards, shared rules that could establish how agents identify themselves, communicate what they are authorized to do and interact across company boundaries.\n\nWritten rules alone cannot provide those controls. Pike said agents need isolated environments where companies can observe their activity, restrict what they reach and shut the environment down when necessary.\n\nAn agent “is not going to read your policy,” he said.\n\n### *Wrong answers, wrong actions*\n\nGreater authority also compresses the time to respond. A hallucinated recommendation in a code review can wait for a developer to review the proposed change, Pike said. An agent that deletes data or burns through a month of computing budget over a weekend has to be detected and stopped while it is still running.\n\nMoving company data somewhere unauthorized is a third case. Pike described that as a security incident, one that should trigger the same monitoring, containment and response procedures security teams already practice for other forms of data loss.\n\nThe response steps themselves are familiar to security and technology teams. They already have procedures for containing an incident, determining whether people or data were affected, repairing the damage and changing the system to prevent a repeat, Levitt said.\n\nWhat changes is how quickly that response has to begin. An agent can delete information, consume company resources or transfer data outside the organization before a person has reviewed what it did.\n\n### *Where liability lands*\n\nMost AI failures will produce some legal exposure, said **Gauri Manglik**, vice president and head of legal, privacy and AI governance at GoFundMe, the online fundraising platform. The size of it depends on the safeguards a company can document from before deployment.\n\nTwo uses carry the most risk. A misrepresentation inside AI-generated content is one, and automated decision-making in hiring or access to financial services is the other.\n\nThose are the cases that justify a separate review track, Manglik said. Whether a company ran red team testing - adversarial testing before release - and whether its training data suited the use are the questions that will be asked afterward.\n\n[Responsibility gets harder to assign as autonomy grows](https://broadbandbreakfast.com/ar/). Manglik pointed to principal-agent law, the centuries-old rule that a principal is liable for acts its agent takes on actual or apparent authority, and said an agent that spends $10,000 still binds the human it acted for.\n\nThat holds only while agent identities stay tied to human ones. Once a subagent acts for a subagent, the chain has no person at the end of it.", "url": "https://wpnews.pro/news/from-copyright-and-privacy-to-agents-ai-governance-is-racing-to-keep-up", "canonical_source": "https://broadbandbreakfast.com/from-copyright-and-privacy-to-agents-ai-governance-is-racing-to-keep-up/", "published_at": "2026-09-19 00:33:15+00:00", "updated_at": "2026-09-19 00:54:49.093485+00:00", "lang": "en", "topics": ["ai-policy", "ai-agents", "ai-ethics", "artificial-intelligence"], "entities": ["Sony Group Corp.", "Alice Xiang", "AI Infra Summit", "Sony AI", "Fair Human-Centric Image Benchmark", "Nature", "Judge William Alsup", "Copyright Act of 1976"], "alternates": {"html": "https://wpnews.pro/news/from-copyright-and-privacy-to-agents-ai-governance-is-racing-to-keep-up", "markdown": "https://wpnews.pro/news/from-copyright-and-privacy-to-agents-ai-governance-is-racing-to-keep-up.md", "text": "https://wpnews.pro/news/from-copyright-and-privacy-to-agents-ai-governance-is-racing-to-keep-up.txt", "jsonld": "https://wpnews.pro/news/from-copyright-and-privacy-to-agents-ai-governance-is-racing-to-keep-up.jsonld"}}