Gemini Spark ships a 24/7 personal agent before the OAuth questions are answered

incrementalLegalEnterprise

Monday, June 1, 2026

Signal

Medium

Time horizon

This quarter

Risk

Offline-action liability inside logged-in accounts

The News

Gemini Spark is now available in the US for Google AI Ultra subscribers; Spark is Google's 24/7 personal agent, appearing as a new "Spark" tab in the web side panel and, on Android and iOS, between Search chats and Daily Brief, with Google noting the "Beta" status. Because it is a cloud-based agent, Spark keeps working in the background even when you close your laptop or lock your phone. Spark runs on dedicated cloud VMs that persist between sessions, executing automations inside Gmail and Calendar without user presence; at $100/month, Google AI Ultra is the first persistent consumer agent tied to a premium subscription tier.

The Read

The interesting part of Spark isn't the demos — it's the legal surface area no one is talking about. How Google assigns liability and generates audit trails when Spark executes actions in a user's account while the user is offline, given existing GDPR and CCPA obligations, is an open question for any enterprise whose employees connect a personal Spark instance to a work Gmail. Google says the agent will always ask users for confirmation before performing sensitive actions, including sending emails or completing a transaction — but "sensitive" is defined by Google, not by your DLP policy. A persistent agent that takes actions in a logged-in session at 3 a.m. is a new category of identity event, and the existing audit infrastructure was built to log human keystrokes. This ships as a consumer product; it will land first as a shadow-IT incident.

Do This Week

Move the offline-agent question out of the "future of work" deck and onto this sprint's risk register. Walk your acceptable-use policy and ask whether an employee connecting Spark (or any 24/7 personal agent) to a corporate Workspace account is permitted, conditionally permitted, or a violation — and write that line down before someone tests it. The same question will land for Microsoft Recall, OpenAI's persistent memory, and Anthropic Cowork within the quarter; the policy you write for Spark is the template for all four.

For Legal