UK businesses unaware of how data is handled overseas AI tools

Published: 01/05/2026
| Financial Times

New research by Harbr Data indicates that most large UK companies are unaware of how sensitive data is handled when processed by artificial intelligence (AI) systems overseas. A survey of senior technology leaders at companies with revenues exceeding £100 million found that 61% do not fully understand international data-handling processes, posing a significant challenge for corporate boards.

International data transfers out of the UK are routine, with almost three-quarters of respondents reporting weekly data transfers and one-third reporting daily transfers. The lack of clarity creates regulatory and compliance risks, particularly concerning data residency, cybersecurity and data protection rules, while more severe threats include data leaks or the malicious use of information. 

The survey highlights that confidence in data management varies significantly by region: while 70% and 62% of business leaders are confident in UK and EU standards, respectively, these figures drop to 31% in North America and 12% in the Asia-Pacific region.

Additional concerns involve the use of open-source components and low-cost models of unclear origin, which may still connect to original source models despite being hosted on Western cloud providers. 

£ - This article requires a subscription. 


Training Announcement: Freevacy offers a range of independently recognised professional AI governance qualifications and AI Literacy short courses that enable specialist teams to implement robust oversight, benchmark AI governance maturity, and establish a responsible-by-design approach across the entire AI lifecycle. Find out more.

Read Full Story

What is this page?

You are reading a summary article on the Privacy Newsfeed, a free resource for DPOs and other professionals with privacy or data protection responsibilities helping them stay informed of industry news all in one place. The information here is a brief snippet relating to a single piece of original content or several articles about a common topic or thread. The main contributor is listed in the top left-hand corner, just beneath the article title.

The Privacy Newsfeed monitors over 300 global publications, of which more than 3,250 summary articles have been posted to the online archive dating back to the beginning of 2020. A weekly roundup is available by email every Friday.