IBM warns UK firms face AI compliance risks

British companies are at risk of future regulatory complications as their artificial intelligence governance frameworks fail to keep pace with rapid technological adoption, according to IBM. The technology group has cautioned that many organisations are inadvertently creating compliance vulnerabilities by treating governance as an afterthought rather than a foundational element of their digital strategy. This warning highlights a growing disconnect between the deployment of advanced AI tools and the establishment of robust oversight mechanisms within the UK business landscape.

Leon Butler, chief executive of IBM UK and Ireland, emphasised the necessity of integrating governance directly into business processes from the outset. He described an AI operating model that focuses on outcomes and process redefinition, ensuring that appropriate data standards and governance structures follow naturally. Butler argued that if governance is built into the architecture of the system, it will be maintained at an overall level, preventing the fragmentation that often occurs when controls are added retrospectively. This approach is designed to ensure that the right data and regulatory safeguards are embedded in the workflow, rather than being bolted on as a separate layer.

The urgency of this issue is underscored by findings from the IBM Digital Sovereignty Index, which reveal a significant gap in corporate AI maturity. While 87 per cent of executives believe they have their AI systems under control, only 27 per cent can provide sufficient evidence to satisfy an auditor. This discrepancy suggests that many leaders may be overestimating their readiness for regulatory scrutiny. The data indicates a critical need for stronger evidence trails to demonstrate compliance and control over AI operations.

Debbie Lawrence, group head of data strategy and management at London Stock Exchange Group, reinforced the importance of proactive evidence collection. She noted that having the right documentation is essential for businesses to be prepared when issues arise. Lawrence explained that relying on existing tools without considering the necessary evidence can lead to significant problems during critical events, as there is no time to scramble for information. She stressed that all relevant data must be readily accessible to ensure a swift and effective response to any regulatory or operational challenges.

Butler added that most British businesses have encountered at least one sovereignty challenge in the past three years, further highlighting the need for stronger evidence in digital sovereignty strategies. Lawrence also highlighted the increasing value of data as a business asset, noting that historical data sets are becoming more valuable as companies gain the ability to mine and analyse trends more efficiently than in previous years.