A growing gap between artificial intelligence (AI) adoption and effective data governance is reshaping the operational landscape for managed service providers (MSPs) and IT service providers. Industry data cited by GTIA’s Data and AI Interest Group indicates that while 97% of providers have adopted AI, only 20% have implemented governance frameworks sufficient to extract value or mitigate risk. This structural mismatch is driving increased scrutiny from regulatory authorities and forcing MSPs to revisit internal decision-making, especially regarding data integrity and platform selection.
Supporting this trend, a Federation of Small Businesses report found 86% of organizations in the UK are struggling with AI and data governance adoption, often uncertain about where to begin. Hollie Whittles, co-founder of Purple Frog Data, described practical barriers: many businesses believe their data is clean and structured but are routinely confronted with evidence of significant inconsistencies and errors during implementation. The cost of remediation and governance, including board-level buy-in, can climb to tens of thousands of pounds, highlighting the substantial upfront investment required before AI can deliver reliable business value.
Operational vulnerability is further magnified by ease-of-use pitfalls and vendor relationships. MSPs lacking in-house data engineering or readiness tools frequently misjudge the scale and complexity of cleaning and securing client data estates. Whittles warned of scenarios where consultants, through careless or uninformed data modelling (such as over-exposing HR data in reporting tools), inadvertently increase both cyber and confidentiality risks. Some firms approach the problem by retaining all data and tooling within clients’ own cloud tenants, shifting data residency and associated risks directly to clients, but raising new questions of contractual clarity and due diligence.
For MSPs and IT leaders, these developments reinforce the need for explicit governance structures, clear contractual provisions regarding data handling, and internal upskilling rather than relying solely on third-party expertise. Short-term revenue can be lost to competitors willing to bypass governance, but there’s an increased long-term risk of error, replacement, or regulatory sanction. Effective governance not only requires financial investment, but also consistent participation from leadership to avoid operational blind spots and to ensure client obligations—and liabilities—are clearly defined and managed.