The rise of AI adoption in UK businesses is undeniable, yet a significant gap in data strategy and governance threatens to undermine its potential.
According to recent research from Carruthers and Jackson, over one in four (26%) organisations in the UK and the US lack a formal data strategy. This disconnect between AI adoption and data governance has created an ‘AI Paradox’—where businesses are eager to leverage AI’s efficiencies but are not fully equipped with the data infrastructure to support it effectively.
The Growth of AI in Business
Only 7% of businesses now operate without AI, a dramatic drop from 26% just a year ago. AI is rapidly becoming an essential tool for efficiency and decision-making. However, this surge in AI adoption is happening without the necessary groundwork—39% of organisations report little to no governance framework, despite integrating AI into their operations.
On the other hand, 37% of leaders noted that their businesses are adopting multiple governance frameworks, a significant increase from 31% in 2023. This shift suggests that some organisations are starting to recognise the importance of structured data governance alongside AI deployment.
The Data Governance Challenge for UK Startups and Scaleups
For startups, scaleups, and portfolio companies in the UK, this trend presents both an opportunity and a risk. AI can provide efficiency gains, predictive insights, and automation at scale, but without a solid data governance structure, these benefits may be short-lived. In fast-growing businesses, where agility is key, overlooking strategy in favour of quick AI implementation can lead to unreliable outputs, security risks, and ultimately, a failure to extract meaningful ROI from AI investments.
Caroline Carruthers, Co-Founder and Chief Executive of Carruthers and Jackson, highlighted this growing concern:
“An AI Paradox has been created, as the use of AI tools in organisations has surged in the last year, yet employees lack the data literacy to use them effectively, as their fundamental understanding remains largely unchanged from last year.”
This is particularly relevant for businesses in high-growth phases—without investing in employee data literacy, companies risk creating a workforce that relies on AI without understanding the data that powers it.
Bespoke Data Strategies: The Future of AI Success
Leading organisations are shifting away from one-size-fits-all governance frameworks to more bespoke approaches, tailored to specific departments. This allows for a more flexible, scalable data strategy that aligns with business needs.
Richard Bovey, Chief for Data at AND Digital, emphasises the need for a balanced approach:
“The benefits of AI are well-known, but a gap remains in the understanding and consideration of the risks it poses if implementation is rushed. Businesses need a strong governance structure to overarch technology development, and that’s especially true when it comes to AI, not only facilitating greater accuracy and reliability within AI outputs but helping to mitigate potential privacy and security concerns.”
This insight is particularly crucial for startups and scaleups, where rapid adoption of technology often takes precedence over foundational data practices. By embedding strong governance principles and upskilling employees in data literacy, businesses can ensure AI acts as an enabler rather than a liability.
The Regulatory Vacuum
A key issue compounding the AI Paradox is the absence of clear government regulation (in the UK) on AI governance. Unlike GDPR, which established a comprehensive framework for data privacy, there is no equivalent for AI governance in the UK. This regulatory vacuum leaves businesses to navigate AI ethics, data protection, and governance on their own, creating fragmentation and uncertainty.
The UK Government’s March 2023 white paper ‘A pro-innovation approach to AI regulation’ marks one of the UK’s first steps towards creating a specific framework around responsible AI development and use. In contrast, the EU AI Act came into force in August 2024, taking a more active regulatory approach, based on categorising AI use into risk tiers with corresponding legal obligations and significant financial penalties for misuse. The United States has taken a more industry-led approach, although the US Federal Government has been directed to follow a set of key principles of responsible use of AI.
A top-down approach, similar to GDPR, could help simplify and standardise AI decision-making for companies. By implementing clear, enforceable guidelines, the UK government could provide businesses with a framework to ensure responsible AI use, mitigate risks, and promote ethical data practices. Without such guidance, organisations are left to develop their own policies, leading to inconsistencies and potential legal vulnerabilities as AI regulations evolve globally.
The government’s role in AI governance should focus on:
- Defining clear AI compliance standards to ensure businesses follow ethical AI practices.
- Providing guidelines on data literacy requirements to help businesses upskill employees and improve data-driven decision-making.
- Developing AI risk management frameworks to address biases, security concerns, and accountability within AI applications.
- Encouraging cross-industry collaboration to create shared best practices and governance models.
For UK startups, scaleups, and portfolio companies, such regulatory clarity would be a game-changer, reducing the burden of self-regulation and allowing them to focus on innovation with confidence.
The Missing Piece in AI Implementation
The report also highlights a concerning gap in data literacy. While 53% of organisations report an increase in AI usage, 57% admit that most employees lack the necessary data skills to leverage these tools effectively. Without a workforce that understands data fundamentals, even the most advanced AI implementations risk delivering flawed insights and inefficiencies.
Moreover, while 44% of businesses have seen a rise in ethical discussions around AI, only 13% have formalised these conversations into structured AI ethics policies. This lag in ethical governance could expose businesses to regulatory and reputational risks as AI legislation and scrutiny increase.
How UK Businesses Can Navigate the AI Paradox
For startups, scaleups, and portfolio companies looking to harness AI effectively, the key takeaways are clear:
- Prioritise data governance: AI success depends on high-quality data and structured oversight. Investing in a data strategy now will prevent costly mistakes later.
- Upskill teams in data literacy: AI tools are only as effective as the people using them. Ensuring employees understand data principles will improve AI adoption and effectiveness.
- Develop ethical AI policies: As AI regulation tightens, businesses that proactively implement ethical frameworks will be better positioned to adapt.
- Adopt flexible governance models: A one-size-fits-all approach won’t work. Tailoring data governance to specific business needs ensures both compliance and efficiency.
AI offers incredible opportunities for UK businesses to scale, innovate, and compete. However, without the right data foundations, organisations risk falling into the AI Paradox—investing in cutting-edge technology without the infrastructure or skills to support it. By addressing data governance, literacy, and ethics now, businesses can future-proof their AI strategies and drive sustainable growth.
As businesses navigate the complexities of AI adoption, it’s essential to have the right guidance and support.
The Small Consultancy specialises in helping organisations manage and embrace change during periods of growth and transformation. Let us help you seamlessly scale your business and harness the power of AI while keeping your people and processes at the heart of success.