Google Research report maps open privacy and security problems for AI agents

Key points

• Report from a workshop of more than 50 academic and industry researchers, held late 2025 in New York City.
• Built on Contextual Integrity, which judges privacy by whether information flows fit established social norms.
• Proposes a contextual policy engine as a supervisor layer that checks whether an action is appropriate before data leaves the user's workspace.
• Calls for standardized multi-agent benchmarks, such as dynamic "Agent Gym" sandboxes, to create a shared safety baseline.

Why it matters for marketers: Content and marketing teams using agents to handle customer data should expect stricter, context-based controls on what information agents can share and act on.