AI governance in a fragmenting world: Compliance as strategic control

Transcript

1. Build the smartest, most useful map on the planet AI governance in a fragmenting world Compliance as strategic control Data Expo — 10 September 2026 Cassandra Moons – Legal Director Compliance Confidential © 2026 TomTom
2. This session is not: X best-in-class compliance control framework X EU AI Act compliance checklist Confidential © 2026 TomTom
3. Agenda Confidential © 2026 TomTom 1. The Fragmenting Global Landscape 2. Compliance as Strategic Enabler 3. Scaling AI Governance Responsibly Regulatory complexity, digital sovereignty, geopolitics Global operating models must adapt to new reality One governance layer to regulate risks, data, innovation
4. Digital Sovereignty & Geopolitics Data & Tech become strategic security assets Impact of EU digital sovereignty Geopolitical complexity across regions, blocs and alliances Confidential © 2026 TomTom
5. Data & Tech become strategic security assets No U.S. sensitive bulk data to countries of concern (e.g. China) Anthropic blacklisted as supply chain risk by U.S. Pentagon U.S. federal safety testing of frontier AI models before release Confidential © 2026 TomTom
6. Impact of EU digital sovereignty Ecosystem capabilities across the tech stack: raw materials, chips, networks, cloud, AI, applications and connected devices Data as common good Interoperability, resilience and strategic indispensability principles Market-led or mandate-led? Confidential © 2026 TomTom
7. Geopolitical complexity Export controls & sanction regulations (U.S., EU and China) Third-party risk and dependencies across the value chain Rule simplification = fragmentation & uncertainty Confidential © 2026 TomTom
8. Compliance as strategic enabler Framework optimization One-layered rulebook Strategic embedding Compliance-by-design Governance Agent augmented Confidential © 2026 TomTom
9. One-layered rulebook Holistic governance framework Consolidated controls library Automated horizon-scanning Confidential © 2026 TomTom
10. Compliance - by - design Product, data and AI lifecycle control deliverables Role-based literacy Monitoring by business KPIs Confidential © 2026 TomTom
11. Augmented governance Proactive, scalable, agent-augmented risk management Enforced in-system guardrails and controls Real-time observability at machine speed Confidential © 2026 TomTom
12. AI governance foundation Know your AI Control your AI Single-layer AI governance gateway Confidential © 2026 TomTom
13. Know your AI One AI inventory with risk assessment Data governance and ownership Continuous discovery to surface shadow AI AI literacy training Confidential © 2026 TomTom
14. Control your AI Guardrails enforced in the pipeline, not in policy Human review escalations integrated Evaluation and red-teaming before release Logging, agent identity and drift alerts Confidential © 2026 TomTom
15. Single-layer AI governance gateway One route for every model call, internal and third-party Policy, access and data controls applied at the gate Full audit trail plus usage and cost insights New obligations configured once, applied everywhere Confidential © 2026 TomTom
16. Data Expo Key Takeaways Compliance as strategic control 01 Translate geopolitical and regulatory complexity into a single, layered framework. 02 Make compliance a resilience asset. 03 Scale AI responsibly through automation, observability and single governance layer. Confidential © 2026 TomTom Not point-in-time controls. Not one project per rule. One rulebook that maps obligations to controls. Embed controls inside the product, data and AI lifecycle where the work actually happens. Know your AI, control your AI through central AI governance gateway. 12 / 12