Google Research maps open agentic privacy and security problems across system, model, user and ecosystem layers

What changed

Google Research published a workshop report on October 5, developed with more than 50 academic and industry participants, that uses Contextual Integrity to map open privacy and security problems for increasingly autonomous AI agents. The report argues that agents handling multi-step tasks across applications often need access to personal data and consequential actions, creating contextual risks that traditional software permission models do not fully address. It organizes research directions across system, model, user and broader ecosystem layers, including how to represent behavioral norms, constrain data flows and actions, detect cross-context violations and make safeguards verifiable without eliminating useful capability. This is a research agenda, not a newly deployed security product or a proven defense.