The 2026 MSP AI Accountability Shift

Primary-source fact

Kaseya introduced an agentic IT management platform, powered by its Kaseya Intelligence engine, at Kaseya Connect Global.

Kaseya describes it as “the first agentic IT management platform”; that superlative is the vendor's and is not independently established, so it is not repeated as fact here.

Primary-source fact

The Microsoft Entra Agent ID platform reached general availability. It provides the identity foundation for AI agents inside an organisation's own Microsoft Entra tenant: an agent identity is a service principal that, in Microsoft's words, “can only be issued tokens in the Microsoft Entra tenant where they're created” and “can't access resources or APIs in other tenants”.

Agent ID works with agents built on Microsoft and non-Microsoft platforms — the boundary is the tenant, not the vendor. Agent identity blueprints can be multitenant, but each tenant gets its own tenant-local identity and the identities themselves always remain single-tenant.

Primary-source fact

The Cyber Security and Resilience (Network and Information Systems) Bill would, if enacted, extend the UK's Network and Information Systems Regulations 2018 to certain managed service providers for the first time. The Bill calls them “relevant managed service providers” and excludes micro and small enterprises, so on the Government's own account only some medium and large providers would come into scope. The Commons passed the Bill on 16 June 2026; it was introduced in the Lords on 17 June 2026 as HL Bill 32 and completed second reading there on 14 July 2026, with committee stage due to begin on 1 September 2026. It has not received Royal Assent and is not yet law.

Position as at 13 August 2026 — a Bill mid-passage. Check the live record at bills.parliament.uk before relying on it. Nothing in the Bill requires ECZ-ID or any named product.

Primary-source fact

The ITU announced the ITU-T Focus Group on Trust and Identity for Humans and Agentic AI (FG-TIDA), established by ITU-T Study Group 17 in June 2026. It held its first meeting online on 29 July 2026, with a face-to-face kick-off scheduled for 1–4 December 2026 in Paris.

An ITU focus group is exploratory pre-standardisation work. It is not an adopted ITU standard and imposes no obligation on anyone.

Primary-source fact

ConnectWise announced the general availability of the ConnectWise Platform, which unifies ConnectWise PSA, ConnectWise RMM, ScreenConnect, ConnectWise SIEM, automation, orchestration and ConnectWise AI Agents into a single platform.

Primary-source fact

The transparency obligations in Article 50 of the EU AI Act (Regulation (EU) 2024/1689) have applied since 2 August 2026. They were not postponed by the Digital Omnibus on AI (Regulation (EU) 2026/1744, in force 27 July 2026), which deferred the high-risk requirements in Chapter III to 2 December 2027 for Annex III systems and 2 August 2028 for Annex I systems.

One transitional exception: for AI systems generating synthetic content placed on the market before 2 August 2026, providers have until 2 December 2026 to comply with the machine-readable marking obligation in Article 50(2). Article 50 sets outcome duties and is technology- and vendor-neutral.