Spain’s First Agentic AI Breach Just Redefined What GDPR Article 35 Requires of AI Agents
An AI agent scanned public files, found a vulnerability in an application, and modified personal records on its own. No human reviewed the request, approved the access, or even knew...