It is about the decisions boards, executives, and governance leaders face when regulation, technology, incidents, and accountability collide.
Privacy functions have become very good at producing evidence that the work was done, and much less good at showing that a decision came out any different because they were there.
Adoption isn't behaviour change. The test is whether risk decisions actually differ.
02AI is where you find out whether the operating model actually reaches the work.
03Independent challenge matters, but it cannot make the business own a privacy, data or AI decision it was never required to make properly.
04Privacy training can improve knowledge without building the judgement people need to shape a consequential decision together.
05Board papers can show that AI governance exists. Rehearsal shows whether management can make, challenge and evidence an AI decision before the organisation is already committed.
Privacy job ads increasingly ask for operational judgement, AI governance and cross-functional influence, while many roles remain scoped around advice, documentation and compliance delivery.
The writing carries most of my thinking on these issues; the contact form is there for anything you want to take further.