![]() |
| Original Post in LinkedIn |
I have been saying for a while that AI is no longer just about models… it is about systems that act.
Now regulators are catching up.
The Spanish Data Protection Agency (AEPD) has published guidance on agentic AI from a data protection perspective.
And this is important.
Because agentic AI is fundamentally different. These are not systems that just answer… they decide, interact, and execute autonomously to achieve goals.
That changes everything.
It changes how data is accessed, how decisions are made, and how responsibility is assigned. And one key message stands out: using AI does not remove accountability. Organizations remain fully responsible for data protection, transparency, and control.
From an architecture perspective, this reinforces something we often underestimate.
You cannot build agentic AI on top of weak data foundations.
Governance, data minimization, traceability, and privacy-by-design are no longer compliance topics… they are core system design principles.
We are entering a phase where:
AI architecture = Data architecture + Governance + Responsibility
And the more autonomous the system becomes, the more intentional the design must be.

Comments