In September 2026, Amazon began refusing Meta's Muse, a consumer AI agent that shops on a user's instructions, with a pop-up telling customers that continued access by an unauthorized AI agent violates Amazon's Conditions of Use. The fight is usually framed as a contest between platforms over who owns the customer. This Article reframes it around a customer the contest leaves out: the disabled person for whom the agent is the way in. A blind shopper, a person with a mobility impairment, or a person with agoraphobia who cannot enter a store may accomplish the purchase only by delegating it to a tool. When the store bans the tool, it bans that person, and Title III of the Americans with Disabilities Act already has a name for that act. The Article makes three doctrinal moves. First, coverage: in every circuit, including those that confine Title III to physical places, a retailer that runs hundreds of physical grocery stores and uses its website and app to move their goods falls within the nexus doctrine. Second, liability: a blanket agent ban is a facially neutral policy that burdens disabled customers differently and more severely, so Title III's command to modify policies, practices, and procedures applies, and Amazon's own Agent Terms, which let it refuse any agent at its sole discretion, are an eligibility criterion that screens out. The Ninth Circuit's August 2026 holding that a shopping agent is a tool, and that the user is the one who accesses the site, removes the premise that the agent is a separate stranger the store may refuse. Third, defenses: the direct threat defense reaches only threats to others, and a customer's chosen risk to her own account falls outside it; security concerns can be met by conditions such as agent identification, which Amazon's own terms already require; lost advertising revenue is not a change in the nature of selling goods; and a store's offer of its own agent answers the claim only where it delivers a like experience. The Article then carries the argument from the browser to the sidewalk, where embodied robots will soon shop for people who cannot, and shows that the Department of Justice's refusal to let public accommodations ban classes of new mobility technology supplies the method. The Article names the practice at stake assistive delegation, and argues that Title III protects it.
Gilly, Travis. "Discriminating Against the Tool: AI Shopping Agents, Robot Shoppers, and the Title III Duty to Modify." Real Safety AI Foundation Working Draft, September 2026. https://realsafetyai.org/research/rjd66w/
References (58)
A.L. ex rel. D.L. v. Walt Disney Parks & Resorts US, Inc., 50 F.4th 1097 (11th Cir. 2022).
A.L. ex rel. D.L. v. Walt Disney Parks & Resorts US, Inc., 900 F.3d 1270 (11th Cir. 2018).
Alexander v. Choate, 469 U.S. 287 (1985).
Amazon. (2025, April 3). Terms of use when you shop brand sites by directing Amazon to complete a purchase on your behalf. Filed as Exhibit K, Dkt. No. 58-15, Amazon.com Services LLC v. Perplexity AI, Inc., No. 3:25-cv-09514-MMC (N.D. Cal. Jan. 15, 2026).
Eilert, M., & Robinson, S. (2025). Empowering consumers with disabilities through generative AI cocreation of servicescape information. J. Pub. Pol’y & Marketing, 44, 457. https://doi.org/10.1177/07439156251328341
Ellison v. United States Postal Service, 84 F.4th 750 (7th Cir. 2023).
Facebook, Inc. v. Power Ventures, Inc., 844 F.3d 1058 (9th Cir. 2016).
First Amended Complaint, Amazon.com Services LLC v. Perplexity AI, Inc., No. 3:25-cv-09514-MMC (N.D. Cal. Sept. 21, 2026), Dkt. No. 122.
Ford v. Schering-Plough Corp., 145 F.3d 601 (3d Cir. 1998).
Fortyune v. American Multi-Cinema, Inc., 364 F.3d 1075 (9th Cir. 2004).
Gil v. Winn-Dixie Stores, Inc., 993 F.3d 1266 (11th Cir. 2021), vacated as moot, 21 F.4th 775 (11th Cir. 2021).
Johnson v. Gambrinus Co./Spoetzl Brewery, 116 F.3d 1052 (5th Cir. 1997).
Johnson, J., Lewis, A., Mankoff, J., & Banner, O. (2026). “I don’t trust it, but I use it”: Navigating trust, privacy, and identity in disabled people’s use of generative AI. In Proceedings of the 2026 CHI Conference on Human Factors in Computing Systems (pp. 1–17). ACM. https://doi.org/10.1145/3772318.3790652
Karczewski v. DCH Mission Valley LLC, 862 F.3d 1006 (9th Cir. 2017).
Kolt, N. (2026). Governing AI agents. Notre Dame L. Rev., 101, 335.
McDonnall, M. C., Boydstun, J., & Steverson, A. (2026). Use of wearable devices and generative AI in the workplace by people with visual impairments. J. Visual Impairment & Blindness, 120, 134. https://doi.org/10.1177/0145482x261423917
McGary v. City of Portland, 386 F.3d 1259 (9th Cir. 2004).
Mukherjee, D. (2022). Editor’s introduction: Disability, social justice, and dignity of risk at 50 years. Perspectives in Biology and Medicine, 65, 157. https://doi.org/10.1353/pbm.2022.0010
National Federation of the Blind v. Target Corp., 452 F. Supp. 2d 946 (N.D. Cal. 2006).
Szwanek v. Jack in the Box, Inc., No. 20-16942 (9th Cir. Nov. 3, 2021).
Tanis, E. S., & Lewis, C. (2020). Artificial intelligence and the dignity of risk. ACM SIGACCESS Accessibility and Computing, (125), 1. https://doi.org/10.1145/3386296.3386303
US Airways, Inc. v. Barnett, 535 U.S. 391 (2002).
Weyer v. Twentieth Century Fox Film Corp., 198 F.3d 1104 (9th Cir. 2000).