AI agent books appointments: limits, cancellations, privacy
Arranging appointments takes time: calls, waiting, matching the calendar. An agent can take this over. Because appointments involve costs and personal data, this also needs clear limits.
Leutrim Miftaraj, Founder, Innopulse Consulting GmbH
Published
Key points
- An agent books, reschedules and cancels appointments with practices, tradespeople or service providers.
- Appointments have consequences: no-show fees, costs, personal data; the limits belong in the mandate.
- Providers see who is booking and whether cancellations are allowed, without receiving more data than necessary.
Starting point
A father has his assistant organize a dentist appointment for himself, a service appointment for the car and a tradesperson for a repair. The agent knows the calendar, requests appointments, books and reschedules when needed. For providers, the question is whether the agent really acts on someone's behalf and whether it may cancel when fees apply.
Flow with evidence
- Mandate: the principal allows bookings and rescheduling as well as cancellations without a fee; cancellations with a fee only after checking back.
- Request: the agent requests free slots and matches them with the calendar.
- Booking: the agent books and presents the mandate, with only the details the provider needs.
- Change: for a rescheduling or cancellation, a decision service checks whether it lies within the mandate.
- Confirmation: the provider confirms; the principal receives a message.
Risks and countermeasures
- No-show fees: cancellations shortly before the appointment can cost money. The mandate limits them or requires checking back.
- Double bookings: the agent matches with the calendar and records every booking as a receipt.
- Personal data: for medical appointments, health details are particularly sensitive; selective disclosure limits them to what is necessary.
- Appointments for others: an agent may book only for the people named in the mandate.
Roles and responsibilities
- Principal: defines for whom, where and at what cost bookings may be made.
- Agent operator: protects calendar and personal details.
- Provider: verifies the mandate for bookings and cancellations and informs the principal.
How the certificate looks
For the dentist booking, KYA verifies the mandate, the binding to the agent and whether bookings are allowed. The verdict is valid. If the agent cancels an appointment with a fee without checking back, although the mandate does not allow this, the scope check reports action_not_in_scope.
Adoption
Providers start with bookings and rescheduling through agents and initially handle cancellations with fees as before. Medical appointments involve additional requirements, described on the page AI agents in healthcare.
Operating metrics
Providers track the share of bookings by agents, the rate of short-notice cancellations and missed appointments. Principals see how many bookings succeed without checking back and how often the agent had to escalate.
Frequently asked questions
May an AI agent book appointments for me?
Yes, if you authorize it. The mandate should define for whom, where and at what cost it may book.
What applies to cancellations with a fee?
They should be explicitly governed in the mandate, for example only after checking back. This avoids unexpected costs.
Which data does the provider receive?
Only what is necessary. With selective disclosure, an agent can present the mandate without revealing all personal details.
Can an agent book for family members?
If the mandate names these people. For adults, their own consent is generally required.
What does KYA verify for appointment bookings?
Mandate, binding to the agent, validity and whether the booking, rescheduling or cancellation was allowed.
What happens with scheduling conflicts?
The agent matches with the calendar. If it finds no suitable slot, it checks back with the principal instead of moving other appointments on its own.
Can the agent also send reminders and cancellations?
Yes. Cancellations with consequences, such as fees, should be governed in the mandate; mere reminders have no consequences.
How do I handle appointments for children?
Parents can book for their children if the mandate names the children. For medical appointments, the rules protecting health data also apply.
May the agent book with new providers?
If the mandate allows it. Many principals initially limit bookings to known practices and businesses.
What applies to deposits at booking?
A deposit is a payment and needs a limit in the mandate. Above it, the agent checks back.
How does the agent handle waiting lists?
It can sign up for waiting lists and book slots that become free, if the mandate allows it and the appointment fits the calendar.
Can the agent arrange appointments by phone?
Some agents can make calls. For evidence, what counts even then is that booking and mandate are recorded, for example through a written confirmation from the provider.
Sources
- NIST: Least Privilege: https://csrc.nist.gov/glossary/term/least_privilege