Agents must adhere to the same data protection and rights as any other data, ensuring security and preventing credential theft.