Automating a workflow does not change who is responsible for the data in it. If anything, it raises the bar.
Know what the agent can see
Give each agent the narrowest access it needs. A support agent does not need payroll data, and a finance agent does not need chat transcripts.
Keep data where it belongs
Choose deployments that keep personal data in-region, and confirm that nothing is used to train shared models.
Log every action
An audit trail of what each agent read and changed makes access requests and incident reviews straightforward.
This is not legal advice; involve your counsel early.
