Artificial intelligence and digital commerce have locked horns in a case Amazon.com has filed against Perplexity AI. Amazon filed the suit in November challenging Perplexity’s Comet browser, especially its ‘Assistant’ artificial intelligence (AI) feature.
an agentic system like Assistant can take multiple actions on a user’s behalf, like a typical human agent: it can log into an account, compare products, fill a cart, enter credit card details, and complete a purchase all by itself While a conventional web scraper passively harvests text to train a model.
Technically speaking, the case between Amazon and Perplexity AI has been decided by the technical architecture of the systems involved. To the panel, it did not matter whether the Comet browser meant to help users act against Amazon’s wishes. Here, it was a two-hop design in which a user’s browser ‘spoke’ directly to Amazon while Perplexity AI servers, working from screenshots, spoke only to the user’s own device. A centralised scraping or transaction service maintaining its own sessions with retailers’ servers would likely have fared differently. In such a case, the role of Perplexity AI might be central. An Indian court effectively has to decide whether a user’s own authority over their account displaces the platform’s denial of permission to third-party tools. Since the user supplies their own credentials, the AI agent functions as a digital proxy. Now, India’s major e-commerce platforms hold significant market power in several verticals.
Section 43(a) of India’s Information Technology Act 2000 penalises a person who accesses or secures access to a computer, computer system or network without the permission of its owner or the person-in-charge. Section 66 of the same Act attaches criminal liability where such access is dishonest or fraudulent. Flipkart held 50-60% gross merchandise value of Indian e-commerce, Amazon held another 25-30%, and Meesho accounted for roughly 10%, according to a May 2026 ICICI Securities Report.
However, Indian jurisprudence on agency and authorised delegation would generally consider this to be “unauthorised” access.
Third, Amazon sued Perplexity AI under the CFAA and the CDAFA rather than for breach of contract, and the panel did not decide whether the Assistant violated Amazon’s terms of service. This reservation can be read in light of a broader trend: to confine CFAA-type ‘anti-hacking’ statutes to breaches of technical barriers, and leaving purely contractual disputes to ordinary contract law.
In fact, it noted that “other legal theories, such as breach of terms of service, may remain available”.
Amazon’s grouse is that while the Assistant accesses customers’ password-protected accounts with the users’ permission, it lacks Amazon’s own authorisation. The technology giant brought its claims under the U.S. Computer Fraud and Abuse Act (CFAA) and California’s Comprehensive Computer Data Access and Fraud Act. Court of Appeals for the Ninth Circuit vacated that injunction. In India, where e-commerce, automated consumer services, and AI adoption are all expanding rapidly, the case also offers a useful, if also imperfect, template to think about platform governance and intermediary liability. Three questions were central in the appeal. Second, the court had reasoned that a user consenting to use the Assistant could not stand in for Amazon’s own authorisation. This reasoning effectively treated a consumer’s authority over their own account to suffice, at least for the purposes of the CFAA, to authorise an AI intermediary acting at their direction. A dominant platform that selectively blocks third-party AI agents while favouring its own proprietary assistant could come under the Competition Commission of India (CCI) scanner. Indian e-commerce platforms also make heavy use of click-wrap terms of use — where a user clicks a button saying ‘I agree’, thus accepting a contract — to restrict automated access. That is, where a consumer has knowingly delegated a shopping task to an AI tool, a blanket platform ban on third-party assistants becomes an unreasonable restraint on consumers’ preferences. Assuming such bans are automatically enforceable denies consumers a meaningful choice. When an AI agent logs in using a user’s own credentials, it processes personal data under that data principal’s explicit direction. The Act’s framework allows ‘consent managers’ to help data principals give, manage, review or withdraw consent. An agentic shopping tool could plausibly operate within this framework as an automated intermediary with managed consent — but which could also complicate any platform strategy that tries to block such agents outright. So Indian AI start-ups building agentic tools would be well advised to favour client-side, user-mediated execution, keeping the point of contact anchored to the user’s own device or session. A platform may then be able to invoke computer fraud provisions as a readymade instrument against agentic competitors, strengthening their control over the market at the cost of innovation and consumer choice. Allowing AI agents to access under reasonable conditions is thus a better strategy than relying on technical barriers or blanket restrictions. Looking ahead, e-commerce platforms should treat the terms of service as a weak and largely untested line of defence against agentic tools. Such terms did not form the basis of Amazon’s claim in its case against Perplexity AI. Instead, they should invest in structured, official agent APIs that allow an agent to interact with a platform while also controlling the interactions, such as by limiting the number of data requests per minute or turning away suspicious bots. Such APIs can also protect monetisation. As for policymakers and regulators, India’s e-commerce booms, the advent of agentic AI should be met with laws that precisely define the rights and responsibilities of agents working on behalf of users. They should clarify when user authorisation suffices and they should identify when a platform’s security interest should prevail. Overall, the laws should balance platform security, fair competition, and consumer autonomy. Krishna Ravi Srinivas is DPIIT IPR Chair Professor & Director, Centre of Excellence in AI & Law. Feba Sara and Gaurangi Kapoor are Research Assistants with IPR Chair, NALSAR University of Law, Hyderabad. Views expressed are personal.
Because perplexity’s servers never contacted Amazon’s, and the Assistant operated as an intermediary within the user’s own session, the panel treated the user, assisted by the tool, as the party doing the accessing, in this case,. It is time to start developing sandboxes and test multiple technical and legal options so that regulators are not found wanting. On August 4, a three-judge panel of the U.S. This can be for denying market access and leveraging dominance in one market to protect another, categories that the CCI has already invoked against e-commerce platforms, including two cases involving MakeMyTrip (in 2019 and 2020 ). Under the Contract Act 1872, terms that unreasonably restrict a consumer’s use of their own account or which amount to an unconscionable bargain remain open to challenge. Finally, under the Digital Personal Data Protection Act 2023, platforms such as Amazon function as data fiduciaries and consumers as data principals. This will minimise server-to-server liability and align with the technical distinction that Indian courts are likely to find persuasive under Section 43 of the IT Act.
On March 9, the judge hearing the case granted a preliminary injunction reasoning that the Assistant’s access was unauthorised “regardless of whether the Amazon users had permitted Assistant to access their own Amazon accounts”. The panel held that it was the user, not Perplexity, who had “accessed” Amazon’s servers, because Perplexity’s own systems never communicated directly with Amazon’s. The ruling is narrow: the panel confined itself to the meaning of “access” under the CFAA and expressly left open other issues, including a potential breach of the terms of service. Still, the ruling is important for what it says about the legal identity of AI agents and the boundaries of a user’s agency online. This is a meaningful change in how “authorisation” is allocated between platform and user, with implications for how judges decide on access and agency for the user vis-à-vis those of a service provider or a platform. The Ninth Circuit’s ruling turned on where “access” technically occurred rather than Perplexity’s commercial intent. Next, if Indian courts interpret “unauthorised access” to mean bypassing a technical barrier, then existing e-commerce platforms will not be able to rely on computer fraud law in a scenario where an AI agent accessed data simply by browsing a platform. On the other hand, if the courts assign a broader reading to “unauthorised access” to include browsing by an AI agent, it could disproportionately favour dominant platforms.
