UK firms demand more control over data as AI risks rise

Half of UK enterprises want greater control over sensitive and strategic data, according to research commissioned by Expereo. The study also found that concern over AI-related security risks is shaping digital sovereignty plans.

The UK findings point to a broader shift in how companies approach data governance as they manage more complex cloud, AI and connectivity systems. Some 29% of UK organisations said digital sovereignty is now a top or high priority, while 27% ranked it among the main drivers of technology investment.

Security concerns featured heavily in the responses. The research found that 58% of enterprises see security and privacy concerns as a significant barrier to AI adoption, while 56% of UK technology leaders worry AI could create new security risks for their businesses.

Pressure from AI adoption, compliance demands and operational resilience is prompting companies to look more closely at how data is handled across distributed technology environments. Rather than focusing only on where data is stored, businesses are paying closer attention to how it moves between cloud platforms, networks and jurisdictions.

Investment pressure

The figures suggest digital sovereignty is moving beyond a narrow compliance issue and becoming part of mainstream technology planning. For UK organisations, governance, risk and compliance appear to be gaining importance as companies expand their use of AI and cloud services.

Commercial pressure is also influencing decision-making. More than a quarter of UK businesses, 26%, said demands from customers or business partners to localise data are shaping their approach to digital sovereignty.

This suggests sovereignty questions are no longer driven solely by regulators or internal legal teams. Client expectations and partner requirements are also starting to affect infrastructure choices, data policies and procurement decisions.

Regional differences also emerged. Enterprises in Asia-Pacific placed the highest priority on digital sovereignty at 38%, ahead of Europe at 31% and the US at 30%.

Network focus

The findings point to a growing role for network visibility in sovereignty strategies. As businesses operate across multiple providers and countries, understanding how data travels is becoming as important as deciding where it resides, Expereo argued.

Ben Elms, Chief Executive Officer at Expereo, said: "Digital sovereignty is increasingly being driven by a desire for greater control over how data moves across cloud, network and AI environments. As many UK businesses operate across multiple providers and jurisdictions, they are focusing not only on where data is stored, but also on how it moves between them. This is placing greater emphasis on network visibility and routing transparency. But while digital sovereignty extends beyond the network, a sovereignty strategy without a network strategy is increasingly incomplete. Delivering on digital sovereignty requires network, cloud, security, governance and data management strategies to work together, helping organisations meet regulatory requirements while enabling innovation and growth. At Expereo, we help multinational businesses design and manage global connectivity around their regional, regulatory and operational needs, providing greater visibility into how traffic moves across complex digital environments. As AI adoption accelerates, this visibility will become an increasingly important part of helping organisations maintain control, manage risk and operate confidently across many jurisdictions."

The emphasis on network oversight reflects a wider change in enterprise architecture. Many large organisations now use a mix of public cloud services, private infrastructure and third-party connectivity providers, making it harder to track data flows across borders or maintain consistent internal controls.

For UK businesses, that complexity comes as boards face greater scrutiny over cyber risk, resilience and the handling of sensitive information. The survey suggests technology leaders are responding by linking sovereignty more closely to investment plans and to practical questions about network routing, security management and data localisation.