AI adoption is widespread (83%), but oversight is lacking (only 13% have strong visibility). This creates risks with autonomous agents acting beyond control, as 76% find them hardest to secure. Governance is weak, with only 7% having dedicated AI teams. The report highlights the need for better monitoring and identity management for AI within enterprises.
https://www.cybersecurity-insiders.com/portfolio/2025-state-of-ai-data-security-report-cyera/
2026 brings key regulatory deadlines affecting the AIDC sector in food, pharma, and manufacturing. FSMA 204’s food traceability deadline is likely delayed, but large companies still require traceability systems. The EU’s Digital Product Passport launches for batteries, with future expansions planned, while DPP and DSCSA both require advanced data capture and 2D scanning. The EU Deforestation Regulation’s deadline is now December 2026, demanding GPS data capture for supply sourcing. The Cyber Resilience Act’s reporting requirements start in September 2026, requiring rapid vulnerability disclosures. Providers need to audit software for necessary data fields, refresh clients’ scanning hardware, and focus on delivering audit-ready solutions.
EU's Digital Omnibus loosens data and AI safeguards for workers under the guise of fostering innovation, benefiting mainly US tech giants. It consolidates data laws but lacks serious impact assessments, weakening protections and oversight for workers in AI-dominated workplaces. Changes to GDPR and AI regulations allow employers greater control over personal data, limiting workers' rights to transparency and resistance against automated decisions, while reducing oversight and AI literacy obligations. Overall, the document argues that the Omnibus prioritizes competitiveness over worker protections, shifting risks onto vulnerable users.
https://www.socialeurope.eu/the-digital-omnibus-deregulation-dressed-as-innovation
Extreme TLDR: Europe’s digital sovereignty depends on smarter data regulation amid market concentration in AI. Simplifying regulation fails to support new tech entrants, as access to data is key for competitiveness. A proposed European Data Commons could enhance access and legal clarity for start-ups while ensuring compensation for content creators, thus fostering innovation without losing regulatory ambition.
The European Commission has delayed final AI Act rules meant to regulate high-risk AI systems, following pressure from industry. This delay creates significant uncertainty, as required legislative changes may not be completed before the current August 2026 deadline. If lawmakers miss this deadline, confusing legal gaps could arise. The pause could last up to 16 months, but may end sooner, leaving businesses unsure about planning and compliance. Companies and experts describe the situation as chaotic, with some pausing compliance work while others press on. The result is widespread criticism that this uncertainty undermines legal stability and Europe’s tech competitiveness.
https://www.politico.eu/article/eu-ai-race-tech-legal-mess-build-legislators/
AI is creating new job roles such as decision designer, AI experience officer, and digital ethics advisor, focusing on human-AI collaboration. These roles integrate machine learning with psychology and ethics, tackling the complexities of AI governance and the human aspects of technology. Organizations need to restructure for AI integration, ensuring human oversight and ethical considerations remain central in this transition.
ESG reporting requires a focus on outcomes and financial KPIs, not just outputs. Current standards, like SASB and CSRD, mostly emphasize activities without mandating targets, undermining sustainability goals. Recommendations include requiring performance-based targets and linking sustainability to business value for effective decision-making.
CISO roles have evolved: cybersecurity is now a business imperative, with increased personal liability for executives. Accountability issues arise as CISOs lack control over security processes, leading to blind spots and breaches. To rectify this, organizations need shared visibility and a true system of record. Collaborative risk management spreads responsibility, enhancing cyber resilience and compliance. Transparency builds trust and positions security as an organizational priority, reducing risks and potential liabilities.
https://www.scworld.com/perspective/shared-accountability-the-new-foundation-of-cyber-leadership
TLDR: Cybersecurity budgets are slowing as economic concerns grow, despite a significant rise in AI spending. Cybersecurity spending increased 4% in 2025, down from previous years. The outlook for 2026 shows potential growth in overall cybersecurity expenditures surpassing $520 billion, yet budgets may be constrained due to financial pressures. Effective budgeting practices are crucial to navigate these challenges.
Digital resilience will become crucial in 2026 due to increased regulatory scrutiny and evolving cyber threats. Organizations must prioritize critical services and enhance incident response capabilities. Legal obligations will expand, particularly in finance, healthcare, and essential sectors, driven by legislation like the UK’s CSR Bill and the EU's NIS2 Directive. Burgeoning supply chain risks highlight the need for rigorous supplier assessments. AI presents both opportunities for improving resilience and new vulnerabilities. Effective governance, proactive risk management, and clear communication will distinguish resilient organizations in a complex threat landscape.
