Topic starter
23/06/2026 7:19 pm
TL;DR: AI governance and ethics fails when organisations stop at principles and never operationalise intake, review, monitoring, and evidence, according to Collibra. Responsible AI only works when governance is embedded across the lifecycle, because post-deployment ethics checks arrive after data, workflows, and business dependence have already hardened.
Editorial analysis by NHI Mgmt Group, based on content published by Collibra: “AI governance and ethics: How to build responsible AI from the ground up”.
Key questions
Q: What breaks when AI governance is designed only for model outputs?
A: Governance breaks when it assumes the AI system only produces text or recommendations for humans to review.
Q: When should organisations prioritise AI ethics review in the lifecycle?
A: Prioritise ethics review at ideation and again before deployment, not only after a model is live.
Q: What signals show that an AI governance programme is not working?
A: Warning signs include disconnected models built by different teams, repeated disputes over data ownership, inconsistent approvals and outputs that cannot be explained to stakeholders.
Practitioner guidance
- Define an AI intake workflow Require every new AI use case to capture purpose, data sources, affected populations, owners and risk tier before build work starts.
- Tie review gates to lifecycle stages Place ethics, legal, privacy and security review checkpoints at ideation, development and pre-deployment, then keep them active in production.
- Build a complete AI inventory Include first-party models, embedded vendor AI, externally hosted agents and any shadow AI discovered in business teams.
Bottom line: AI governance fails when ethics remains a statement of intent instead of a live operating model with intake, review and evidence.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
25/06/2026 3:16 am
AI governance and ethics only matter when they are operationalised as a control system. A principles-only programme creates the appearance of oversight without the mechanism to enforce it. The article is right to frame governance as the operating model, because regulators and boards do not assess intent, they assess evidence.
A few things that frame the scale:
- 13% of organisations suffered breaches of their AI models, according to IBM's Cost of a Data Breach 2025 report.
A question worth separating out:
Q: Should organisations treat embedded AI and homegrown AI the same way?
A: No. Embedded AI often inherits risk from SaaS defaults, while homegrown AI introduces custom retrieval paths and local accountability gaps. Both need governance, but the control points differ. Teams should standardise the review model while still tracking the specific identity and data path for each class.
👉 Read our full editorial: AI governance and ethics need operating models, not principles