Who Decides Which Data an AI Agent Can Access?
The data owner and classification policy should, per agent and destination, with the decision recorded; in practice the builder or an inherited login does.
Research topic
ISO/IEC 42001
Research on ISO/IEC 42001: AI agent security, tokenization and checks for sensitive data access before allowing enterprise workflows to run.