The State of Data and AI Governance 2026

AI Is in Production. Governance Has to Catch Up.

AI governance has moved from policy work to operational risk management. According to new primary research by the analyst firm BARC, AI is already in production at 97% of organizations. Yet most governance programs remain immature: two thirds of organizations have already experienced AI-related incidents.

The BARC study “The State of Data and AI Governance” is based on a global survey of data, AI, IT and business leaders. It shows what separates the AI Leaders from the rest of the market, and which steps turn governance from a compliance exercise into an operating model that lets AI scale with confidence.

 

Download the study now

Fill out the form to access the white paper

The State of Data and AI Governance 2026

AI Is in Production. Governance Has to Catch Up.

AI governance has moved from policy work to operational risk management. According to new primary research by the analyst firm BARC, AI is already in production at 97% of organizations. Yet most governance programs remain immature: two thirds of organizations have already experienced AI-related incidents.

The BARC study “The State of Data and AI Governance” is based on a global survey of data, AI, IT and business leaders. It shows what separates the AI Leaders from the rest of the market, and which steps turn governance from a compliance exercise into an operating model that lets AI scale with confidence.

 

Download the study now

Why AI Governance Matters More Than Ever

Policies only reduce risk when they become controls inside live AI workflows. Without that, organizations struggle with:

  • Data privacy breaches and biased or harmful outputs, each reported by 23% of respondents
  • Shadow AI outside central visibility, reported by 22%
  • Incorrect AI outputs reaching end users or customers, reported by 21%
  • AI agents acting without automated guardrails
  • Unstructured data and context feeding AI without quality controls
  • Regulatory compliance and data sovereignty across regions

The study shows the core gap: 62% of governance teams focus their controls on the data layer, while model-layer controls reach only 45% and infrastructure-layer controls 43%. Mature AI governance connects data, application, model and infrastructure controls rather than stopping at isolated checkpoints.

EMEA Works on Fundamentals

For European organizations, the gap starts earlier. 40% of EMEA respondents name inadequate data quality as a top obstacle to governing data and AI, compared with 15% in North America. 35% cite siloed data (North America: 17%). Only 30% of EMEA organizations have formal sovereignty policies for AI processing and storage, compared with 56% in North America. The study explains what this means for the next steps.

What You'll Learn

  • Where AI governance stands in 2026, based on 234 data, AI, IT and business leaders
  • Which AI incidents organizations are already facing, and how often
  • What separates AI Leaders from the rest of the market
  • Why data governance tools alone do not govern models, agents and AI-driven decisions
  • How organizations control AI agents today, and why human oversight alone will not scale
  • How North America and EMEA differ in governance maturity
  • Six recommendations from the BARC analysts

Fill out the form to access the white paper