Implement agent identification and authorisation
Is this legally binding?
Guidance. Voluntary guidance. Best practice, not obligation, until a contract or a regulator cites it.
Give each agent a unique identity tied to a supervising agent, human user or department, record the capacity in which it acts, and ensure delegated permissions never exceed what the human user is authorised to do.
From the source
“An agent should have its own unique identity, such that it can identify itself to the organisation, its human user, or other agents.”
Section 2.1.2, Agent identity best practices, p.12
What this connects to
2 relations. Official relations are the ones the source documents state; anything marked GAGE analysis is our reading, not an agency's.
Verified against the official source on 2026-08-17. GAGE is not affiliated with or endorsed by any agency named here, and nothing on this page is legal advice. How this is built and checked.