Warner Unveils Discussion Draft of Legislation to Create Innovative Market for Secure Artificial Intelligence Agents (AI AGENT Act)
Source: Office of Sen. Mark R. Warner; U.S. Senate press release · 2026-06-29
WASHINGTON – Today U.S. Sen. Mark R. Warner (D-VA) released a discussion draft of the Artificial Intelligence Access, Gatekeeper Exchange, and Nondiscriminatory Transfer Act (AI AGENT Act), legislation that would open up the marketplace for consumer AI agents, built around strong privacy, security, and market fairness protections.
As AI agents become more integrated into consumers’ digital lives, they will increasingly act as intermediaries between users and the online services they rely on. Without clear rules, dominant technology platforms could restrict or disadvantage competing AI agents, limit consumers’ ability to choose the services that best meet their needs, or steer users toward their own products and platforms. Correspondingly, an approach that can validate trustworthy AI agents increases the safety and security of users and online platforms alike. The AI AGENT Act would establish a federal framework to protect consumer choice, promote fair competition, and ensure AI agents operate in the best interests of the users they represent.
“As agentic AI transforms how Americans interact with technology, consumers deserve a real choice in the marketplace – and AI agents must be accountable to the people they serve,” wrote Sen. Warner. “This discussion draft is a major step toward building a clear federal framework that promotes innovation, protects consumers, and ensures the United States continues to lead the world in emerging technology. I am releasing this draft to hear from stakeholders, experts, and the public so we can strengthen the legislation before it is formally introduced.”
Establish rights and responsibilities for guaranteed secure access by AI agents to certain large online platforms.
Create a Federal Trade Commission registry of trusted, secure AI agents – with a regulatory environment swift enough to approve innovative user services or quickly curtail products that violate consumers’ trust.
Require AI agents protect users’ privacy and user data and act transparently in a user’s best interest and in a manner that makes clear to third-party websites and online service providers that an AI agent has valid authorization.
Direct NIST to identify technical standards and open protocols to make online services more accessible to AI agents and to ensure consensus-based standards around critical mechanisms like authentication.
Protect businesses, users, and online providers from AI agent abuse or misuse.
Lines of inquiry this paper opens 19
Research framings built by reading the notes related to this paper — the questions it feeds into.
How can merchant-funded agents remain loyal to consumer interests in digital commerce?- Should retailers be able to refuse agents before any commercial relationship begins?
- Can courts decide whether delegating your shopping to an AI agent is legally permissible?
- How would becoming an agent of choice protect brands in a multivendor basket world?
- Can existing unfair commercial practices law cover agentic transactions today?
- How do existing consumer protection laws handle algorithmic agents as decision-makers?
- Can existing consumer protection laws address algorithmic shopping agents?
- What is the regulatory gap in Google's personalized pricing rollout?
- Can AI layers on TMC platforms change underlying OTA supply relationships?
- Does existing consumer protection law already provide tools for AI agent oversight?
- Does existing consumer protection law adequately address AI agents acting as algorithmic intermediaries?
- Should consumer law concepts like best interest duties be redesigned for AI agents?
- Will platforms voluntarily add consumer-beneficiary language to agent prompts?
- What identity and authorization standard would satisfy both consumer and merchant requirements?
- Why does Amazon's objection focus on visibility and consent rather than credential safety?
- Could a cross-industry standard let users control what access agents have?
- How can identity standards from OAuth and OIDC apply to agents?