What it is
The Digital Regulation Cooperation Forum (DRCF) is a voluntary coordination body formed in July 2020 by four UK regulators: the Competition and Markets Authority (CMA), the Financial Conduct Authority (FCA), the Information Commissioner’s Office (ICO), and Ofcom. Each of these bodies has its own statutory remit — competition, financial services, data protection, and communications/online safety, respectively — but all four found themselves regulating overlapping pieces of the same digital economy: a social media platform’s content moderation might touch online safety, data protection, and competition law simultaneously, with three different regulators potentially weighing in separately.
The DRCF is not a new regulator and has no independent statutory powers of its own. It is a forum for its member regulators to share analysis, align positions, and publish joint guidance where their remits intersect, rather than a body that can issue binding rulings in its own name. Each member organization retains its own enforcement powers and enforces separately under its own legislation; the DRCF’s output is coordination and public clarification, not adjudication.
Since its founding, the DRCF has also taken on an international-facing role. In 2023 it launched the International Network for Digital Regulation Cooperation (INDRC) to connect with equivalent regulatory coordination efforts in other countries, and it is frequently cited by other jurisdictions considering their own cross-regulator models for digital oversight.
Why it matters for AI governance and narratives
The DRCF has become a notable voice in the regulatory framing of agentic AI specifically because it sits at the seam between several regulatory domains that autonomous AI agents cut across simultaneously: an agent that shops, pays, and shares data on a user’s behalf touches consumer protection, payments regulation, data protection, and competition law all at once. On 31 March 2026, the DRCF published a foresight paper, “The Future of Agentic AI,” described by trade press as the UK’s most detailed cross-regulatory assessment to date of AI systems that act on behalf of users rather than simply responding to prompts.
The paper’s central framing — what it calls the “many hands” problem — is that as responsibility for an agent’s actions diffuses across model providers, agent platforms, integrators, and the businesses deploying them, it becomes correspondingly harder for both businesses and consumers to identify who is accountable when something goes wrong. The DRCF’s answer, consistent across its four member regulators, is that autonomy does not create a liability gap: existing UK law on consumer protection, competition, data protection, financial services, payments, and cybersecurity continues to apply in full to agentic systems, and the deploying business bears responsibility for compliance. This is a deliberately conservative regulatory narrative — it resists the idea that AI agents require wholly new law, instead asserting that current frameworks already cover them if applied rigorously. That framing itself is a notable entrant in the broader contest over how agentic AI should be governed, standing in some tension with industry arguments (common among AI builders) that novel agent capabilities require novel, purpose-built regulatory frameworks rather than retrofitted old ones.
Key facts and dates
The DRCF was formed in July 2020 by the CMA, ICO, and Ofcom, with the FCA joining shortly after as the fourth member. The CMA separately published its own guidance for businesses deploying agentic AI on 9 March 2026, ahead of the joint DRCF foresight paper later that month, stating that greater agent autonomy “also brings greater responsibility” and framing trust as “critical infrastructure for adoption, investment and growth.”
The DRCF’s agentic AI paper sets out specific compliance expectations: AI agents should produce auditable records of their decisions and actions; businesses deploying agentic AI must disclose plainly to consumers that an AI agent is acting on their behalf; and an agent whose reasoning cannot be explained or challenged is treated as a liability risk under consumer, contract, and data protection law. The paper also reiterates that overstating what an agentic system can do may itself breach consumer protection obligations under the Consumer Rights Act 2015. The DRCF frames these as clarifications of how existing law applies, not as new rules — a distinction that matters because it means no new legislation or enforcement mechanism was created; responsibility for enforcing these obligations remains with each of the four member regulators individually, under their existing powers.
Where to learn more
- DRCF — The Future of Agentic AI (foresight paper, 31 March 2026) — the primary source for the agentic AI guidance referenced above
- DRCF — About the DRCF — the forum’s own account of its mandate, members, and governance
- Institute for Government — Digital Regulation Cooperation Forum (explainer) — independent policy-institute context on the DRCF’s origins and role
- Ofcom — The Digital Regulation Cooperation Forum — one member regulator’s description of how the forum operates in practice