Artificial Intelligence1 min read

Singapore authorities urge strict limits on AI agent autonomy, access to personal accounts

By · Published by Everything Blog

In short

The Cyber Security Agency of Singapore, GovTech, and IMDA issued the advisory to help consumers mitigate emerging privacy threats tied to autonomous digital assistants. Officials specifically cautioned against connecting automated tools to sensitive healthcare, banking, or government accounts, warning users never to disclose one-time passwords. Crucially, systems should require mandatory manual approvals before executing high-consequence transactions, deleting files, or sending messages. Users must also audit activity logs and stay vigilant against malicious hidden prompts embedded in external files or websites.

Key points

  • Consumers remain legally responsible for all actions and transactions carried out by thei…: Consumers remain legally responsible for all actions and transactions carried out by their personal artificial intelligence agents.
  • Critical operations like sending messages, deleting data, and finalizing transactions sho…: Critical operations like sending messages, deleting data, and finalizing transactions should mandate manual, one-time approvals rather than simple chat instructions.
  • Users must routinely audit logs and monitor application settings to prevent their persist…: Users must routinely audit logs and monitor application settings to prevent their persistent profile data from being utilized for model training.

Sources checked by our analysis pipeline: 1

SINGAPORE – When managing personal artificial intelligence agents, connect only the necessary apps, restrict access to sensitive accounts, and specify that permission is needed before deleting or sharing any files.

These are among the precautions set out in an advisory issued on Nov 6 by the Cyber Security Agency of Singapore (CSA), Government Technology Agency (GovTech) and Infocomm Media Development Authority (IMDA) to help consumers use personal AI agents safely.

Unlike chatbots that primarily answer questions, personal AI agents can take actions on users’ behalf, such as browsing websites, managing emails and making bookings.

The advisory follows the Singapore launch of Meta’s Muse, which the company bills as the world’s first personal AI agent built for consumers. It can connect to services such as Gmail and Google Calendar to help users manage emails and schedules, and work with shopping and travel platforms.

But such convenience brings privacy and security risks. Depending on their access, agents may expose sensitive information, make mistakes or act beyond users’ intentions, the advisory said. Some continue working in the background, while malicious websites or messages…

Artificial Intelligence