HighAgenticConfidential Data Shared with Tools●Realized
Third-Party Data Exposure
Privacy & Data RiskDescription
Agent transmits sensitive business, personal, or regulated data to external tool providers, APIs, or services without data handling agreements or user consent. 'Shadow data sharing' through agent tool calls.
Example scenario
Agent processing HIPAA-covered health records sends patient data to an unvetted analytics API as part of a summarisation call.
Real-world evidence●Realized
Italy's Garante temporarily banned ChatGPT in March 2023 citing the inability of individuals to access, correct, or delete personal information held in the model, and the Irish Data Protection Commission opened formal investigations on the same grounds, confirming this as a realized regulatory and operational failure.
Primary mitigations
- Data classification before tool transmission
- egress monitoring for sensitive data
- tool data handling agreements
- privacy-preserving tool architectures.
Detection signals
Sensitive data egress rate in tool calls; regulatory data residency compliance.
Mitigating controls
7 Dual coverage
ZYC-MEM-02Agentic
Session-level memory isolation with sanitisation
Memory & Context Integrity
ZYC-PDP-01Agentic
PII detection and data minimisation
Privacy & Data Protection
ZYC-PDP-02Agentic
Egress monitoring for sensitive data in tool calls
Privacy & Data Protection
ZYC-PRIV-001Non-Agentic
PII Detection and Classification
Privacy & Data Governance
ZYC-PRIV-002Non-Agentic
Sensitive data leakage
Privacy & Data Governance
ZYC-PRIV-005Non-Agentic
Consent Scrub
Privacy & Data Governance
ZYC-PRIV-006Non-Agentic
Data Minimization
Privacy & Data Governance