OneTrust Report Finds AI Adoption Outpacing Governance at Many Organizations
Summary
OneTrust’s 2026 report says AI adoption is widespread while governance remains fragmented. Respondents cited security, privacy, data-quality and oversight challenges, with many reporting delayed initiatives and plans to increase governance technology budgets.
Key points
- Seventy-four percent of respondents reported departmental or scaled AI adoption, but only 17% said governance was embedded by design.
- Eighty-seven percent said their organizations encourage AI agents; 40% do so while governance and controls are still developing.
- Nearly half reported at least one incident in the past year involving AI systems or agents taking unapproved actions.
- Thirty-three percent said employees used unapproved AI tools because approved options or processes were not available quickly enough.
- Data quality, access, privacy and security were among the most common causes of AI initiative delays.
- Only 5% said coordination and accountability were defined across the AI lifecycle; 98% planned to increase budgets for AI governance technologies.
Article Details
- Publisher
- OneTrust
- Report Period
- 2026
- Scope
- Survey findings on organizational AI adoption, governance maturity, agent use, incidents, and governance budgets.
- Key Statistics
- 74% of respondents reported departmental or scaled AI adoption.
- 17% said AI governance was embedded by design.
- 96% said at least one AI initiative was slowed, paused, or complicated by governance, risk, or review requirements.
- 87% said their organizations encourage AI agent use; 47% reported defined governance and controls, while 40% said these were still developing.
- 98% planned to increase budgets for technologies used to govern AI in the next financial year.
- Recommendations
- Identify, assess, monitor, and document third-party AI throughout its use.
- Use employee training and AI literacy, formal AI review and approval processes, and expanded monitoring or governance controls to address AI-related incidents.