  Conversational agents open the world to new opportunities for human
interaction and ubiquitous engagement. As their conversational abilities and
knowledge has improved, these agents have begun to have access to an increasing
variety of personally identifiable information and intimate details on their
user base. This access raises crucial questions in light of regulations as
robust as the General Data Protection Regulation (GDPR). This paper explores
some of these questions, with the aim of defining relevant open issues in
conversational agent design. We hope that this work can provoke further
research into building agents that are effective at user interaction, but also
respectful of regulations and user privacy.
