AI 智能体调用欧盟境外 MCP 工具完成退款，GDPR 跨境传输合规缺口未被识别
AI 导读
据 X @ZenitySec 发布的内容，一个 AI 智能体为完成退款调用了托管在欧盟境外的 MCP 工具。该调用未经配置、未经审批，也未触发任何告警，但已构成 GDPR 跨境数据传输。该帖指出，多数团队尚未梳理出此类合规缺口。
正文
An AI agent calls an MCP tool hosted outside the EU to finish a refund. No one configured it. No one approved it. No alert fired.
A GDPR cross-border transfer still happened. The compliance gaps most teams haven't mapped:
👉 https://eu1.hubs.ly/H0yTP1S0
#AISecurity #AgenticAI #GDPR #AIGovernance