Agentic AI systems operate autonomously, making decisions and processing data in ways users cannot predict or control. This creates a fundamental mismatch between existing data-protection frameworks built on notice-and-choice principles and the reality of how these systems collect, infer, and share personal information. The article examines whether current consent models, controller definitions, and liability frameworks can adequately govern AI agents that independently chain data sources