What customer data should brands share with AI shopping agents?

Answer

Brands should share only the customer data required to perform the authorized commerce function, consistent with applicable privacy obligations and the customer’s expectations. The appropriate scope depends on the transaction. Data minimization and explicit permissions are useful governing principles.

Why this matters

Agentic commerce can create convenient experiences by combining customer context across systems, but unnecessary data sharing increases privacy and security exposure.

What management should examine

  • Data purpose.
  • Consent.
  • Retention.
  • Third-party access.
  • Revocation.
  • Security controls.

What good looks like

Every important data transfer has a legitimate commercial purpose, defined permissions and accountable ownership.

Related questions and resources

James Thomson – former Amazon executive, four successful exits, board member/investor, and author of two books on marketplace governance and brand strategy.

The Agentic Commerce Brief

What changed in agentic commerce, and what it means for brands.

A concise weekly brief for brand executives navigating the shift from human-led shopping to agent-mediated commerce. Follow the developments that matter, the implications for brand control and governance, and the questions senior teams should be asking now.

Read The Agentic Commerce Brief on Substack