Sara Jodka’s article, "Before you deploy an AI agent: the privacy controls organisations actually need," was published in Privacy & Data Protection Journals, Volume 26, Issue 8.

Sara Jodka’s article, “Before you deploy an AI agent: the privacy controls organisations actually need,” was published in Privacy & Data Protection Journals, Volume 26, Issue 8, explaining why agentic AI should be governed as a continuous process rather than just a software product. Drawing on her experience advising US organisations, she highlights nine controls to implement before deployment to manage privacy risks and ensure compliance across UK, EU, and US regimes. “The jurisdictions are diverging on the rules for automated decisions even as they converge on the underlying expectation: know what the agent does, constrain it by design, evidence the safeguards, and keep the ability to stop it,” Sara says.