Agentic commerce is here. Are you ready for the compliance gaps?

AI agents are completing purchases on users’ behalf without visiting storefronts, without triggering consent flows, and with most compliance teams still working out what that means. It’s happening now.

McKinsey projects $3 to $5 trillion in global agentic transactions by 2030. The two protocols shaping how those transactions happen, Google’s UCP and OpenAI and Stripe’s ACP, are already live and merchants are already onboarding.

Here’s what you still need to answer: who holds accountability when an agent shares personal data with a merchant to close a sale, what valid consent looks like when there’s no interface to capture it, and how far platform-level safeguards actually go.

iubenda’s new guide covers how agentic commerce works, what the leading protocols do, and the open questions you need to start thinking about now.