Your chatbot is not a third party: what OLG Hamm and Moffatt mean for the agent on your website
A Canadian tribunal in 2024 and a German Higher Regional Court in May 2026 both refused to treat a website chatbot as someone else. Both cases turned on false facts, not attacks. Legal information, not advice, on what that means for an operator, mapped to four controls you can publish.
Amazon blocked Meta's Muse. The fight is about who the agent says it is
Amazon began blocking Meta's Muse from its retail site on 20 September 2026, saying the agent arrived without notice, did not identify itself, and handled customer logins Amazon could not inspect. The Perplexity ruling left sites their terms of service. What the standoff establishes about agent identity on the open web, and what it leaves unsettled.
OWASP named ten agentic risks. Four of them are identity problems
The OWASP Top 10 for Agentic Applications is written for security engineers. Four of its ten categories are really about identity: who an agent is, who it speaks for, and who approved what. Translated for the people who run the site.
Agent-washing: how to test whether an AI agent is real
Agent-washing rebrands chatbots as AI agents. This is a falsifiable four-check test, readable, addressable, networked, accountable, that a repainted chatbot fails and a real site agent passes.
GDPR, AI agents, and web scraping: what the EDPB's 2026 guidelines leave out
The EDPB adopted its first GDPR framework for scraping personal data to train generative AI. It says almost nothing about the live agents that now visit your site on one person's behalf.
The EU AI Act's Article 50 guidelines, decoded: what your AI agent must disclose from 2 August
On 20 July 2026 the European Commission adopted its final Guidelines on Article 50. Here is what an operator of a customer-facing AI agent actually has to disclose from 2 August, in plain terms.
The EU AI Act's August 2026 deadline: what actually applies to AI agents
From 2 August 2026 the EU AI Act's Article 50 makes AI agents disclose they are AI and label what they generate. The heavier high-risk duties slipped to 2027 and 2028. What actually applies, and to whom.