Topic starter
23/06/2026 7:19 pm
TL;DR: AI governance fails when ethics stays as intent instead of a live operating model with intake, review and evidence, Collibra says. Systems need inventory, lifecycle checkpoints and continuous monitoring if responsible AI is to be defensible in practice.
Editorial analysis by NHI Mgmt Group, based on content published by Collibra: “AI governance and ethics: How to build responsible AI from the ground up”.
Key questions
Q: When should organisations prioritise AI ethics review in the lifecycle?
A: Prioritise ethics review at ideation and again before deployment, not only after a model is live.
Q: What signals show that an AI governance programme is not working?
A: Warning signs include disconnected models built by different teams, repeated disputes over data ownership, inconsistent approvals and outputs that cannot be explained to stakeholders.
Q: What breaks when AI governance is designed only for model outputs?
A: Governance breaks when it assumes the AI system only produces text or recommendations for humans to review.
Practitioner guidance
- Define an AI intake workflow Require every new AI use case to capture purpose, data sources, affected populations, owners and risk tier before build work starts.
- Tie review gates to lifecycle stages Place ethics, legal, privacy and security review checkpoints at ideation, development and pre-deployment, then keep them active in production.
- Build a complete AI inventory Include first-party models, embedded vendor AI, externally hosted agents and any shadow AI discovered in business teams.
Bottom line: AI governance fails when ethics remains a statement of intent instead of a live operating model with intake, review and evidence.
Glossary terms: Responsible AI, AI Operating Model, Shadow AI, Data Lineage
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 12 hours ago by NHI Mgmt Group
25/06/2026 3:16 am
AI governance and ethics only matter when they are operationalised as a control system. A principles-only programme creates the appearance of oversight without the mechanism to enforce it. The article is right to frame governance as the operating model, because regulators and boards do not assess intent, they assess evidence.
A few things that frame the scale:
- 13% of organisations suffered breaches of their AI models, according to IBM's Cost of a Data Breach 2025 report.
A question worth separating out:
Q: Should organisations treat embedded AI and homegrown AI the same way?
A: No. Embedded AI often inherits risk from SaaS defaults, while homegrown AI introduces custom retrieval paths and local accountability gaps. Both need governance, but the control points differ. Teams should standardise the review model while still tracking the specific identity and data path for each class.
👉 Read our full editorial: AI governance and ethics need operating models, not principles