Spain's data protection agency has received the first notification of a personal-data breach in which the intruder was an AI agent rather than a person. By the notifying company's account, the agent searched for vulnerabilities, achieved a valid login, explored the application on its own, altered personal data and accessed invoices. The regulator's response is not a new rule but four changes to how every company must think about risk, response time, credentials and human oversight, with its own caveat that AI creates no new threats; it removes the time you had to respond to the old ones.

In the same week, two London bodies retired the other two point-in-time assumptions: give AI a learner's permit and monitor it for life, and stop passing liability from the companies that build AI to the companies that use it.

In this episode, Stephen Forte covers:

• Madrid, the incident. The AEPD published the notification on 14 September: an agent built on "a well-known language model" chained the phases of the attack without a person steering each step. The regulator's caveats air with it: the account comes from the notifying organisation; the model and its provider are not implied compromised; one case is not a trend.
• The sentence that matters. "AI does not create new threats. It increases the speed, scale and adaptability of known malicious techniques, reducing the time available to detect and contain them."
• Four sentences that could be your risk committee's agenda. Write AI-executed attack into the risk analysis explicitly; assume response plans built for a human attacker are too slow; treat an over-permissioned account, key or token as a door that opens at machine speed; keep human oversight, resting on detection and response that can keep up.
• London, approval. The MHRA-established commission recommends staged authorisations for AI medical devices, "similar to 'L-plates' for learner drivers," and continuous monitoring "throughout their working life." A recommendation, not yet a rule.
• London, liability. Parliament's Joint Committee on Human Rights: "far too much freedom" for the companies that develop AI systems "to pass on liability to those who deploy them"; "responsibility to prevent harm should sit with those who are best able to do so." It calls for a dedicated AI Bill and a new regulator.
• The close. Nothing on the regulator's list of fundamentals is new. What changed this week is that you no longer have time to do it later.

A note on specifics: "first" means the first notification to the Spanish regulator, of one case; the model and the affected organisation are not named because the regulator did not name them; the London reports are recommendations to government, not law.

Sources:

• Agencia Española de Protección de Datos, blog, 14 September 2026 (in Spanish). AEPD statement
• GOV.UK, National Commission into the Regulation of AI in Healthcare, 10 September 2026. Press release and report
• Joint Committee on Human Rights, "Human Rights and the Regulation of AI," HC 160, 14 September 2026. Report

The AI Brief from the YPO Technology Network is a daily executive briefing on the AI developments that matter to business leaders. Hosted by Stephen Forte.