Ninth Circuit rules Perplexity AI assistant is a tool, not person

This decision provides immediate legal clarity for developers of AI-powered shopping assistants and browser tools by classifying them as extensions of user intent rather than independent entities. By narrowing the scope of the CFAA, the court prevents platforms like Amazon from using anti-hacking statutes to block competitive automated tools that act on behalf of consumers. For the broader streaming and digital ecosystem, this establishes a precedent that software acting as a 'passive conduit' does not constitute unauthorized access. The industry must now watch for future litigation defining the exact boundary where a user-directed tool becomes an autonomous agent, as that transition remains a significant structural liability gap.

The Ninth Circuit's decision arrives amid intensifying legal battles over AI-powered tools that interact with commercial platforms on behalf of users. Perplexity AI launched its Comet browser in 2025, and the case marks the first appellate ruling on whether agentic AI assistants constitute unauthorized access under federal anti-hacking law. The Electronic Frontier Foundation filed an amicus brief arguing that Perplexity itself does not access Amazon's servers and that users of the Comet browser do, a framing the court explicitly endorsed, noting that EFF's explanation 'articulates the nature of the system most clearly.' EFF further warned that Amazon's theory, if accepted, 'could expose users themselves to criminal liability,' a concern the panel echoed in its opinion.

The business implications extend well beyond Perplexity AI itself. Amazon initiated the dispute to protect its marketplace from third-party automated access, but the ruling narrows the legal tools available to dominant platforms seeking to block competitive AI shopping assistants. The San Francisco Chronicle reported that Judge Milan Smith's 3-0 panel found Perplexity had not violated Amazon's rights under the CFAA because any Amazon data was first transmitted to the user's computer and later relayed to Perplexity through screenshots. The decision also intersects with ongoing antitrust scrutiny of platform gatekeeping, where regulators have signaled interest in whether dominant platforms can use technical and legal barriers to suppress competitive tools.

From a technical and standards perspective, the court's distinction between user-directed tools and autonomous agents creates a bright-line test that will shape how developers architect AI systems. Cooley LLP's analysis noted that agents that do not rely on the user's computer as a relay will pose greater legal risk, putting new emphasis on how the AI agent communicates with third-party servers. Eric Goldman's Technology & Marketing Law Blog observed that since the user is the one using the Assistant tool, Perplexity is not accessing Amazon's servers in the first place, meaning the entire CFAA case unwinds once that conclusion is reached. The decision leaves unresolved the question of when an AI agent's autonomous decision-making crosses the threshold from tool to independent actor, a gap that legal scholars expect will generate further litigation as become more prevalent in commerce and content access, especially as regulation for autonomous systems.