IAPP Global Summit 2026: Privacy | AI governance | Cybersecurity law

WASHINGTON, DC

30 March-2 April

Back to conference agenda

Delegating to Machines: The Legal Fine Print

Tuesday, 31 March

09:00 - 10:00 EDT

Intermediate level

BREAKOUT SESSIONCYBERSECURITY LAWAI GOVERNANCEFRAMEWORKS AND STANDARDSAI AND MACHINE LEARNINGLEGAL

This session is part of the Think Tank series. Think Tank sessions are 45-minute breakouts with a 15-minute Q&A where experts in law and consultancy share their expertise on relevant and thought-provoking topics.

When an AI agent clicks “I agree” or completes a purchase, centuries-old agency doctrines collide with autonomous systems. When an AI agent acts, what determines its authority? How can platforms strengthen apparent authority where they want it (purchases, terms, consents) and limit it where they don't (misrepresentations, dark patterns, unauthorized account changes)? This panel brings together AI agent developers and the platforms they access to examine AI agent apparent authority and allocation of liability. The panel will explore how contracts, user experience, and technical controls shape responsibility, and how human-in-the-loop safeguards bolster agent authority.

What you will learn:

• Agency law is being stress-tested by AI. When an AI agent clicks “I agree” or makes a purchase, courts will have to decide whose authority that action represents — user, platform, developer, or no one. Companies must define agency roles now, or courts will do it for them.

• Human-in-the-loop is legal architecture. Confirmation steps and authentication gates are not just security features — they build a defensible story of reasonable reliance and apparent authority. Where you place (or omit) those gates shapes liability.

• Early design choices will shape the law. Through contracts, user interface flows, and technical controls, companies can influence how courts apply centuries-old agency doctrine to agentic AI. The governance frameworks built today will determine exposure tomorrow.

Sponsored by: Cooley

Badge scanning: The IAPP uses Cvent to provide badge scanning services. By allowing IAPP to scan your badge, you are consenting to have Cvent provide the sponsor with your contact information, and thereafter you may be contacted by the sponsor after the event. You may revoke this consent by clicking here or by clicking the unsubscribe link found within the sponsor emails received.

Moderator and speakers

headshot of Daniel Berrick

Daniel Berrick

CIPP/E, CIPP/US

Senior Policy Counsel for AI

Future of Privacy Forum

headshot of Kristen Mathews

Kristen Mathews

CIPP/US

Partner

Cooley

headshot of Noga Rosenthal

Noga Rosenthal

AIGP, CIPP/E, CIPP/US

General Counsel and Chief Privacy Officer

Ampersand