Agentic AI and consumer law: Why trust will determine adoption at scale
07 Jul 2026
by Jocelyn Paulley, Partner at Gowling WLG
Agentic AI and consumer law: Why trust will determine adoption at scale
Agentic AI - systems that can act autonomously to make decisions, complete tasks and transact on behalf of users - is moving rapidly from concept to real-world deployment. Across UK sectors, the opportunities are clear: faster decision-making, more personalised services and reduced friction for consumers.
But the real question is not simply where agentic AI can be used. It is whether it will be trusted enough to be used at scale.
For both consumers and businesses, adoption will depend on confidence that these systems are reliable, accurate, predictable and compliant with existing regulation. Without that trust, the expected gains in efficiency, competition and customer experience will be difficult to realise.
The opportunity: Reducing friction across UK consumer markets
Agentic AI has strong potential in sectors where consumers face complex choices or repetitive decisions.
In retail and e-commerce, agents could compare products, select options and complete purchases. In financial services, they could identify suitable products or support switching. In utilities and telecoms, they could manage contracts and optimise tariffs. In travel, they could plan and adjust journeys dynamically.
Across these use cases, the value is consistent: saving time, reducing search costs and improving outcomes. For businesses, it offers more responsive and personalised services at scale.
However, these benefits rely on a key assumption: that the AI is acting in the consumer’s interests, within clear and understood boundaries.
Trust issue one: Can an AI agent really act in the best interests of a consumer?
As agentic AI becomes more autonomous, a central question emerges: what does it mean for an AI system to act as an agent for a consumer? The legal concept of agency requires the agent to act in the best interests of its principal. However, an AI agent will do what it is instructed to do, but cannot understand broader context, ethics or benefits without being instructed. It is not clear that the current legal concepts of agency can be easily applied to an AI agent.
If an AI is selecting products or entering transactions, key issues include:
Authority: what permissions does the agent have, and how are these controlled?
Accountability: how can a consumer be confident the AI stays within its instructions?
Explainability: can it justify its decisions?
Error handling: what happens if it gets something wrong?
These questions have practical consequences. If a contract is entered into by an AI on behalf of a user, is it binding? Does a counterparty need to know it is dealing with an AI rather than a person?
Many consumers will not fully understand how an agent operates or its limitations. That raises the question of whether AI agents are fit for purpose where decisions have financial or legal consequences for the consumer. What if an AI agent makes a bad decision which the consumer acts on? Terms and conditions for software products, and particularly AI, typically shift risk and responsibility for use to the user. But contracts with consumers must not contain unreasonable terms and must be easy for consumers to understand. That seems like a difficult square to circle with complex technology.
Ultimately, trust depends on whether an AI agent can be relied on to act in the best interests of its user - and in a way that is understandable and controllable.
Trust issue two: when businesses deploy agentic AI
Trust is equally important where agentic AI is used by businesses.
If an AI system is recommending products or guiding a customer journey, the business remains responsible for its behaviour. At scale, this can amplify risks quickly.
For example, an AI agent could:
present incomplete or misleading information
steer consumers towards favourable outcomes for the business, not necessarily the consumer
create artificial urgency or pressure
fail to clearly communicate key terms
These risks are not new, but automation increases both their speed and reach, and raises the possibility that they happen without the knowledge of the business.
There are also data protection challenges. Agentic systems may process large volumes of personal data, generate inferences and act in ways that are harder to monitor or explain. This increases the importance of accuracy, transparency and accountability.
Even basic design choices matter. Making terms and conditions technically available to an AI agent may not satisfy the legal obligation to make information available to the consumer. Similarly, if an AI provides inaccurate information to the consumer, this could amount to misrepresentation by the business.
In this context, explainability and transparency are essential to both compliance and trust.
Trust issue three: when both sides use AI agents
The complexity increases further when both consumers and businesses rely on AI agents.
If AI is effectively interacting with AI, traditional concept of 'agreement' become harder to apply. There may be no clear moment of human review or explicit assent by the parties themselves, raising questions about whether there was a genuine intention to be legally bound or simply automated execution.
If something goes wrong, allocating responsibility also becomes more complex. For example, what losses were reasonably foreseeable where outcomes were determined by automated systems? How should indirect or unintended consequences be treated?
These are developing issues, but they underline the need for clear safeguards.
What needs to change to enable responsible scale?
To unlock the full potential of agentic AI across UK sectors, three sets of levers need to be addressed.
Technical levers include improving reliability and accuracy, building explainable systems, and implementing clear permission controls so agents act within defined limits. Strong identity and authentication are also critical to ensure agents are properly authorised, and systems must be auditable and interoperable to avoid consumer lock-in.
Organisational levers include clear accountability for AI behaviour, ongoing monitoring and testing against real customer journeys, effective complaint handling, and robust oversight of third-party providers. Agentic systems should be treated as operational actors that require supervision.
Policy levers include clearer regulatory guidance, development of trusted digital identity infrastructure, and standards that support transparency, portability and fair competition.
Trust is the condition for scale
Agentic AI presents a significant opportunity to reshape UK consumer markets, making services more efficient, personalised and easier to use. But adoption will not be driven by capability alone. It will be driven by confidence.
Consumers need to trust that AI agents act within clear limits and in their interests. Businesses need confidence that these systems are compliant, controllable and commercially defensible.
In that sense, trust is not a secondary concern. It is the foundation for scaling agentic AI responsibly across the UK economy.
Jocelyn Paulley, Partner at Gowling WLG
Jocelyn Paulley, Partner at Gowling WLG
techUK - Seizing the AI Opportunity
The UK is a global leader in AI innovation, development and adoption.
AI has the potential to boost UK GDP by £550 billion by 2035, making adoption an urgent economic priority. techUK and our members are committed to working with the Government to turn the AI Opportunities Action Plan into reality. Together we can ensure the UK seizes the opportunities presented by AI technology and continues to be a world leader in AI development.
Get involved: techUK runs a busy calendar of activities including events, reports, and insights to demonstrate some of the most significant AI opportunities for the UK. Our AI Hub is where you will find details of all upcoming activity. We also send a monthly AI newsletter which you can subscribe to here.
Derek Thompson, Senior Vice President and GM, EMEA at Workato, shares his insights on how agentic AI is at risk of becoming a 'side project' for many, without intelligent and ambitious enterprise integration.
Read Okta's guest blog, discussing how the core opportunity for British organisations today is enabling teams to safely move AI agents into production at scale and at speed.
Sign-up to our monthly newsletter to get the latest updates and opportunities from our AI and Data Analytics Programme straight to your inbox.
Contact the team
Kir Nuthi
Head of AI and Data, techUK
Kir Nuthi
Head of AI and Data, techUK
Kir Nuthi is the Head of AI and Data at techUK.
She holds over seven years of Government Affairs and Tech Policy experience in the US and UK. Kir previously headed up the regulatory portfolio at a UK advocacy group for tech startups and held various public affairs in US tech policy. All involved policy research and campaigns on competition, artificial intelligence, access to data, and pro-innovation regulation.
Kir has an MSc in International Public Policy from University College London and a BA in both Political Science (International Relations) and Economics from the University of California San Diego.
Outside of techUK, you are likely to find her attempting studies at art galleries, attempting an elusive headstand at yoga, mending and binding books, or chasing her dog Maya around South London's many parks.
Usman joined techUK in January 2024 as Programme Manager for Artificial Intelligence.
He leads techUK’s AI Adoption programme, supporting members of all sizes and sectors in adopting AI at scale. His work involves identifying barriers to adoption, exploring solutions, and helping to unlock AI’s transformative potential, particularly its benefits for people, the economy, society, and the planet. He is also committed to advancing the UK’s AI sector and ensuring the UK remains a global leader in AI by working closely with techUK members, the UK Government, regulators, and devolved and local authorities.
Since joining techUK, Usman has delivered a regular drumbeat of activity to engage members and advance techUK's AI programme. This has included two campaign weeks, the creation of the AI Adoption Hub (now the AI Hub), the AI Leader's Event Series, the Putting AI into Action webinar series and the Industrial AI sprint campaign.
Before joining techUK, Usman worked as a policy, regulatory and government/public affairs professional in the advertising sector. He has also worked in sales, marketing, and FinTech.
Usman holds an MSc from the London School of Economics and Political Science (LSE), a GDL and LLB from BPP Law School, and a BA from Queen Mary University of London.
When he isn’t working, Usman enjoys spending time with his family and friends. He also has a keen interest in running, reading and travelling.
Sue leads techUK's Technology and Innovation work. This includes work programmes on AI, Cloud, Data, Quantum, Semiconductors, Digital ID and Digital ethics as well as emerging and transformative technologies and innovation policy. In 2025, Sue was honoured with an Order of the British Empire (OBE) for services to the Technology Industry in the New Year Honours List. She has also been recognised as one of the most influential people in UK tech by Computer Weekly's UKtech50 Longlist and was inducted into the Computer Weekly Most Influential Women in UK Tech Hall of Fame.
A key influencer in driving forward the tech agenda in the UK, in December 2025 Sue was appointed to the UK Government’s Women in Tech Taskforce by the Technology Secretary of State. She also sits on the UK Government’s Smart Data Council, Satellite Applications Catapult Advisory Group, Bank of England’s AI Consortium and BSI’s Digital Strategic Advisory Group. Previously, Sue was a member of the Independent Future of Compute Review and co-chaired the National Data Strategy Forum. As well as being recognised in the UK's Big Data 100 and the Global Top 100 Data Visionaries in 2020, Sue has been shortlisted for the Milton Keynes Women Leaders Awards and has been a judge for the Loebner Prize in AI, the UK Tech 50 and annual UK Cloud Awards. She is a regular industry speaker on issues including AI ethics, data protection and cyber security.
Prior to joining techUK in January 2015, Sue was responsible for Symantec's Government Relations in the UK and Ireland. Before that, Sue was senior policy advisor at the Confederation of British Industry (CBI). Sue has an BA degree on History and American Studies from Leeds University and a Master’s Degree in International Relations and Diplomacy from the University of Birmingham. Sue is a keen sportswoman and in 2016 achieved a lifelong ambition to swim the English Channel.
Visit our AI Hub - the home of all our AI content:
Enquire about membership:
Become a techUK member
Our members develop strong networks, build meaningful partnerships and grow their businesses as we all work together to create a thriving environment where industry, government and stakeholders come together to realise the positive outcomes tech can deliver.
