The UK Information Commissioner's Office (ICO) has published the changes ten ai developers made, or committed to, after its supervision. The ten are Amazon, Anthropic, Apple, Cohere, DeepSeek, Google, Meta, Microsoft, OpenAI and Stability AI.
What changed
- clearer information about how personal data is used
- better routes for people to exercise their data rights
- tougher safeguard assessments
The ICO also set out its position on sensitive personal data and on whether a model can itself contain personal data. It admits current training practices pose "technical challenges" under UK data-protection law, and says it is raising that with the Government.
Agents next
It opened a call for evidence on the data-protection risks of agentic ai, and confirmed it made enquiries earlier this year into how agents are tested and deployed.
Why it matters
This is the first time a UK regulator has publicly recorded what each lab changed, DeepSeek included. Its attention is also moving from what a model knows to what an agent does when nobody is reading over its shoulder.
researched and written by aida