New privacy laws are constantly emerging, existing ones are evolving, and for compliance teams, keeping up feels like a never-ending task. The stakes are high, with the risk of hefty fines and damage to customer trust looming over every decision.

New privacy laws are constantly emerging, existing ones are evolving, and for compliance teams, keeping up feels like a never-ending task. Today, 80% of the global population is covered by data privacy regulations, affecting approximately 6.6 billion people. The stakes are undeniably high, with the risk of damage to customer trust and staggering financial penalties looming over every decision. Enforcement is also sharper than ever: U.S. state privacy fines more than doubled in 2025 to over $3.4 billion, and the average GDPR fine now exceeds $2.5M.

It’s no surprise that 69% of IT leaders find that these rapid regulatory changes are making their jobs more complex and difficult. This complexity often leads to the all-too-common “pre-audit fire drill”- a frantic scramble of spreadsheets, manual policy checks, and chasing down data owners, all to prove compliance after the fact. This reactive approach isn’t just stressful, it’s unsustainable.

A smarter approach to compliance

What if you could move from a state of panic to perpetual readiness? This is the promise of the Agentic Enterprise‌, where AI agents work with your teams as collaborative partners. Instead of simply flagging problems, imagine an AI agent that could proactively monitor your data, interpret dense regulations, and help you stay ahead of risk.

Introducing new agentic capabilities in Privacy Center

Last Dreamforce we announced Agentforce in Privacy Center, a purpose-built AI agent designed to automate the complexities of data privacy management, giving you the confidence that your organization is always audit-ready. We are pleased to announce that this feature is now generally available and Privacy Center customers can activate it in minutes at no additional cost.

“We are seeing that integrating Agentforce is transformative for our customers. It turns what used to be weeks of manual compliance planning and coordination into a guided, automated workflow that identifies issues and drafts remediation plans in minutes. This helps our customers move faster toward a compliant org and spend more time on strategy, not administration,” said Ralph Bruno, Senior Director, Cervello – Kearney Activate

Privacy Center’s new agentic capabilities use pre-built compliance frameworks for complex laws such as GDPR and CCPA, allowing users to review and activate regulation-specific retention rules. Privacy Center, now with Agentforce includes:

• Proactive risk detection: Agentforce autonomously scans Salesforce tenant metadata, data privacy policies, and system context against common regulatory frameworks, such as GDPR, to proactively surface personal or sensitive data exposure and non-compliance risks.
• Prioritize regulatory issues: Agentforce prioritizes data privacy issues by relevance and severity, incorporating regulatory and business context — such as where sensitive Personally Identifiable Information (PII) lives in the context of a customer’s data — making recommendations more precise and easier to implement.
• Accelerate compliance remediation: Agentforce autonomously surfaces compliance risks, including re-classifying sensitive data or implementing important data management policies, such as the Right-to-be-Forgotten (RTBF). The agent will also support custom data management policies for more expansive regulatory use cases.

See how Agentforce can help you navigate the evolving regulatory landscape. Agentforce is available with Privacy Center and can be accessed in the App Launcher. Navigate to Agentforce in the Privacy Center app and use the wizard to step through the configuration.