{"id":661922,"date":"2026-10-29T08:02:49","date_gmt":"2026-10-29T07:02:49","guid":{"rendered":"https:\/\/aivancity.ai\/blog\/ftc-investigation-into-openai-and-anthropic-who-is-responsible-for-ai-agents\/"},"modified":"2026-10-29T08:03:56","modified_gmt":"2026-10-29T07:03:56","slug":"ftc-investigation-into-openai-and-anthropic-who-is-responsible-for-ai-agents","status":"publish","type":"post","link":"https:\/\/aivancity.ai\/blog\/en\/ftc-investigation-into-openai-and-anthropic-who-is-responsible-for-ai-agents\/","title":{"rendered":"FTC Investigation into OpenAI and Anthropic: Who Is Responsible for AI Agents?"},"content":{"rendered":"\n
\n

\n The\n Federal Trade Commission (FTC)<\/strong>\n The American company confirmed the\n September 30, 2026<\/strong>\n the opening of a investigation targeting OpenAI, Anthropic\n, and other companies in the artificial intelligence sector<\/strong>.\n Sound The exact scope has not yet been made public<\/strong>,\n But the process is taking place at a time when models are becoming increasingly\n integrated into agents capable of accessing the Internet<\/strong>,\n to use tools and take action in\n external environments<\/strong>.\n The central question, therefore, is not whether an AI can be\n held legally liable, but rather to determine\n what responsibilities providers,\n integrators, and organizations must assume when their\n systems cause or facilitate harm.<\/strong>\n <\/p>\n<\/div>\n\n

\n\n
\n 01\n <\/div>\n\n

\nWhat the FTC Actually Confirmed\n <\/h2> \n\n<\/div>\n\n

The FTC confirmed to the Associated Press that it is investigating OpenAI, Anthropic, and other AI companies regarding potential risks to consumers. According to available information, the investigation has been underway for several months. As of October 6, 2026, OpenAI and Anthropic are the only two companies that have been publicly identified.[1]<\/a>[2]<\/a><\/sup><\/p>\n\n

This confirmation remains limited. No public document has yet specified the products under review, the incidents in question, the requests made to the companies, or the legal theory being considered. It is therefore not possible to assert that the investigation focuses exclusively on autonomous agents, even though the behavior of systems capable of using the Internet and external tools forms the immediate context of the announcement.<\/p>\n\n

An investigation is neither an accusation, nor a court ruling, nor proof that a company has violated the law. It may be closed without charges being filed, lead to a settlement, or result in legal proceedings. This distinction must remain clear in any analysis of the case.<\/p>\n\n

\n\n
\n 02\n <\/div>\n\n

\nWhy AI Agents Are Changing the Scale of Risk\n <\/h2> \n\n<\/div>\n\n

A conversational model primarily generates a response. An agent links this model to a memory, applications, a browser, APIs, or a computing environment. It can search for information, fill out a form, edit a file, send a message, or trigger an operation, within the limits of the permissions granted to it.<\/p>\n\n

The key change comes from moving from recommendations to action. An error embedded in a sequence of operations can propagate before a human notices it. The risk then depends on the model, permissions, tools, and mechanisms available to stop or reverse the action.<\/p>\n\n

\n \n \n \n \n \n \n \n \n \n
\n Risk\n <\/th>\n\n \n Example of a consequence\n <\/th>\n\n \n Mastery Question\n <\/th> \n <\/tr>\n <\/thead>\n\n
\n Unauthorized action\n <\/td>\n\n \n Sending, purchasing, modifying, or sharing that goes beyond the user\u2019s stated intent.\n <\/td>\n\n \n Does the sensitive action require explicit confirmation at the time it is performed?\n <\/td> \n <\/tr>\n\n
\n Excessive access\n <\/td>\n\n \n Accessing files, messages, or data not necessary for the mission.\n <\/td>\n\n \n Do access rights follow the principle of least privilege, and do they expire after the task is completed?\n <\/td> \n <\/tr>\n\n
\n External instruction\n <\/td>\n\n \n Does a page, document, or message influence the agent\u2019s behavior?\n <\/td>\n\n \n Is the content being viewed treated as unreliable data rather than as commands?\n <\/td> \n <\/tr>\n\n
\n Chain error\n <\/td>\n\n \n An incorrect conclusion triggers a series of operations that are consistent with one another but inappropriate.\n <\/td>\n\n \n Does the system check intermediate results and know how to interrupt the process?\n <\/td> \n <\/tr>\n\n
\n Insufficient traceability\n <\/td>\n\n \n The organization cannot trace the sources, tools, and validations that led to the action.\n <\/td>\n\n \n Do the logs allow for auditing, appeal, and rapid correction?\n <\/td> \n <\/tr>\n <\/tbody>\n <\/table>\n<\/div>\n\n

The key change comes from moving from recommendations to action. An error embedded in a sequence of operations can propagate before a human notices it. The risk then depends on the model, permissions, tools, and mechanisms available to stop or reverse the action.<\/p>\n\n

Behavior does not stem solely from the model, but also from instructions, permissions, and interfaces. Responsibility must therefore be analyzed at the level of the entire system.<\/p>\n\n

\n\n
\n 03\n <\/div>\n\n

\nWhat the FTC Can Investigate Under Existing Law\n <\/h2> \n\n<\/div>\n\n

In particular, the FTC enforces Section 5 of the Federal Trade Commission Act, which prohibits unfair or deceptive trade practices. A deceptive practice may result from a false or unsubstantiated statement, or from a material omission likely to influence the consumer. An unfair practice involves, among other things, substantial harm that the consumer cannot reasonably avoid and that is not offset by benefits to consumers or competition.[3<\/a>][4]<\/a><\/sup><\/p>\n\n

In the case of an AI agent, several questions may fall under this framework. Does the provider accurately describe the service\u2019s level of autonomy, limitations, and risks? Do the promises regarding security or human oversight align with how the service actually operates? Is the data used in accordance with the stated commitments? Are the safeguards proportionate to the foreseeable consequences of an error?<\/p>\n\n

In July 2026, the FTC issued a draft policy statement on the accuracy of AI systems for public comment. The document notes that companies may violate Section 5 when they market a system in a manner inconsistent with the reasonable expectations created among consumers. This statement was still a proposal at the time of writing and should not be presented as a final rule.[5]<\/a><\/sup><\/p>\n\n

The agency had already used its investigative powers in September 2025 to request information from seven chatbot providers regarding their advertising, security testing, protection of minors, and data management. This investigation, based on Section 6(b), was not, in and of itself, a charge. It does, however, demonstrate that the FTC can require detailed information prior to any potential enforcement action.[6]<\/a><\/sup><\/p>\n\n