Top Data Governance Trends to Watch in 2025

For businesses serving EU customers, including those in the UK, Ireland, and other English-speaking jurisdictions, unclear or outdated privacy notices are now a higher enforcement priority. The focus on transparency means regulators will be scrutinising privacy notices, information provided at the point of data collection, and how clearly organisations communicate their data practices. The European Data Protection Board announced its 2026 Coordinated Enforcement Framework (CEF) action, with 25 Data Protection Authorities across Europe jointly assessing compliance with GDPR transparency obligations under Articles 12 to 14.

Until now you could see which sites contained such content, not which files. Then check that your OneDrive retention and departed-user policies are the ones you want applied to AI-drafted documents, because that is https://seoadder.info/lessons-learned-about-16/ where they now live. From 3 September, actions taken in Gemini Notebook appear in the Admin console’s audit and investigation tools, with the user, IP address, and resource involved, so AI-assisted work on your documents is no longer invisible to whoever handles security. The fine splits into €300,000 for security failures, €300,000 for keeping records with no retention justification, and smaller amounts for notifying the breach late and failing to tell the people affected.

Marc Andreessen, Co-founder and General Partner at Andreessen Horowitz, joins Betting on America to press past the settled question of whether AI is going to transform our world. However, the next decade of expansion must keep the sensitivity of payments data in mind and close current gaps in India’s data protection regime. Union Commerce and Industry Minister Piyush Goyal on Tuesday said the PM GatiShakti National Master Plan would continue to support multimodal connectivity, faster infrastructure development and greater logistics efficiency as the initiative completed five years.

September 2026

The Hidden Risk in Identity Supply Chains Modern identity verification often relies on a complex supply chain that distributes camera capture, document parsing, liveness checks, and risk scoring across multiple vendors. By the time a synthetic face reaches a visual liveness model, the most critical context may already be gone. If a backend cannot verify the hardware provenance of an image or video, the rest of the security pipeline operates on degraded input. While some business partners worry that oversight slows innovation, his team is streamlining processes to enable speed without sacrificing control.

Microsoft eliminated reactivation fees for Microsoft 365 Archive content effective 31 March 2025, making it cheaper to move inactive SharePoint content to cold storage and bring it back when needed. These tools address the oversharing problem that Copilot has made impossible to ignore. If your organisation operates across multiple US states, a unified approach to AI governance is increasingly important. Most carry the now-familiar thresholds (typically processing the data of 100,000+ state residents, or 25,000+ while earning significant revenue from selling data), so the smallest businesses often fall outside them. Factor in total cost of ownership including the additional services bundled in suite licenses. If you are on standalone plans, start evaluating Microsoft 365 Business Basic ($6/user/month) or Business Standard ($12.50/user/month) as replacements.

US: Connecticut, Utah, and Arkansas privacy laws take effect

These reports identify sites with broadly shared content, the same content Copilot can surface to any user with access. State-level AI laws continue to develop independently, and the EU AI Act applies regardless of US federal policy. For businesses, this means less federal guidance on AI risk management but potentially fewer compliance obligations at the federal level. Most businesses using off-the-shelf AI tools like Copilot are https://www.lite-editions.com/why-people-think-are-a-good-idea-7/ deployers rather than providers, but deployers of high-risk AI systems will have their own obligations once the deadline arrives.

• SAM provides data access governance reports, site access reviews, and oversharing detection, tools that help organisations identify and remediate the data governance gaps that Copilot makes visible.
• The report changes no permissions and requires SharePoint Advanced Management, which is already bundled for tenants with at least one Copilot licence.
• In the digital age, data security and regulation are key issues for maintaining national security, global supply chains, and economic strength.
• GDPR fines can reach up to €20 million, while CCPA impacts over 50% of U.S. businesses.
• Then check that your OneDrive retention and departed-user policies are the ones you want applied to AI-drafted documents, because that is where they now live.

Provide training and resources to help data stewards stay updated on best practices and regulations. Data stewards need strong analytical skills, communication abilities, and a deep understanding of data governance policies. Establish clear communication channels and shared goals to align business and IT teams. How can https://watchingapple.com/how-i-became-an-expert-on-4/ organizations foster better collaboration between business and IT teams for data governance?

Citrix healthcare field CTO says governance essential for AI agents Okta’s Harish Peri on what it takes for CIOs to secure AI agents Explore agent swarms, autonomous DFIR, AI threats, and the controls that hold up. This candid assessment from the security leader of one of the world’s largest financial institutions has struck a chord, particularly his observations about SaaS security. The cybersecurity community has been buzzing about JPMorgan Chase CISO Pat Opet’s open letter to third-party suppliers since its release right before RSA.

• Investigators found patient files in disused bathrooms, a shipping container in a turf shed, and derelict buildings, damaged by mould, water, and animal droppings.
• From 3 September, actions taken in Gemini Notebook appear in the Admin console’s audit and investigation tools, with the user, IP address, and resource involved, so AI-assisted work on your documents is no longer invisible to whoever handles security.
• If you have never written a retention schedule, our data lifecycle management guide explains what a workable one looks like for a small business.
• Agentic AI systems need a deep understanding of where they are, what they know, and the constraints that apply.
• Companies must compare regulations like GDPR and CCPA, understanding compliance costs and scalability.
• The first binding obligations under the EU AI Act took effect on 2 February 2025, prohibiting AI systems that pose unacceptable risks.

According to Gartner (2025), organizations that actively engage stakeholders see an 80% success rate in data governance initiatives. Regular audits and team training on data standards are crucial for maintaining high data quality. Organizations should also enhance data quality management by implementing data cleansing tools and defining clear metrics for accuracy. GDPR fines can reach up to €20 million, while CCPA impacts over 50% of U.S. businesses. Recognizing these pitfalls can help you steer clear of costly mistakes and ensure effective governance. As organizations increasingly rely on data-driven decision-making, effective data governance becomes essential.