Cisco Study Finds AI Expanding Privacy Programs as Governance Gaps Persist
Summary
Cisco’s 2026 privacy study finds 90% of organizations expanded privacy programs because of AI, but only 12% describe AI governance committees as mature and proactive. Findings highlight sensitive-data risks and gaps in vendor accountability.
Key points
- The study surveyed more than 5,200 professionals with privacy responsibilities across 12 markets through a double-blind online survey in September 2025.
- AI expanded privacy programs at 90% of surveyed organizations; 43% increased privacy spending, and 93% plan additional privacy or data-governance resources within two years.
- Only 12% describe their AI governance committees as mature and proactive, indicating an operational governance gap despite broader investment.
- Seventy percent acknowledge risk exposure from proprietary or customer data used in AI training; 29% report using unedited or unredacted customer data when developing or using GenAI.
- Although 81% say GenAI providers are transparent about data practices, only 55% require clear contractual terms addressing data ownership, usage rights, and intellectual property.
- Eighty-five percent say data localization adds cost, complexity, and risk to cross-border service delivery.
- Cisco recommends stronger data classification, cross-functional AI oversight, workforce training, and point-of-use safeguards to reduce risky data exposure.
Article Details
- Publisher
- Cisco
- Report Period
- 2026 edition; survey conducted in September 2025
- Scope
- Global survey of privacy investment, AI and data governance, localization, and vendor accountability across 12 markets and 26 industries.
- Sample Size
- Over 5,200 IT, technology and security professionals with data privacy responsibilities; double-blind online survey independently analyzed by Sandpiper Research & Insights.
- Key Statistics
- 99% of surveyed organizations report measurable benefits from privacy investments.
- 90% of surveyed organizations report that AI has expanded the scope of their privacy programs.
- Only 12% of surveyed organizations describe their AI governance committees as mature and proactive.
- 85% of surveyed organizations say data localization adds cost, complexity, and risk to cross-border service delivery.
- 55% of surveyed organizations require clear contractual terms covering data ownership, usage rights, and IP parameters when working with AI vendors.
- Recommendations
- Understand data origins, classification, and usage, and communicate data practices transparently.
- Invest in data infrastructure and governance with consistent collection, formatting, labeling, and architecture.
- Evaluate localization and infrastructure choices against regulatory requirements, provider risks, scalability, security benefits, and fragmentation costs.
- Establish a single, empowered, cross-functional AI governance body to embed responsible data handling throughout development and deployment.
- Provide workforce training and point-of-use safeguards to reduce risky data exposure.
People
Dev StahlkopfCisco Executive Vice President and Chief Legal Officer; quoted on extending trust by design into legal and ethical frameworks.Harvey JangCisco Vice President, Deputy General Counsel, and Chief Privacy Officer; quoted on transparent communication about data collection, processing, and safeguards.Jen YokoyamaCisco Senior Vice President and Deputy General Counsel; quoted on governance establishing clarity, accountability, and trust in AI systems.