62% of healthcare practices treat cybersecurity and compliance as a technical line item rather than a patient-safety priority.

76% of healthcare practices say they are not ready for the proposed 2026 HIPAA Security Rule.

60% of healthcare leaders have self-attested to HIPAA compliance despite known, unpatched vulnerabilities.

33% of organizations say internal audits and compliance reviews trigger action on data sovereignty.

19% of U.S. mid-market enterprise IT leaders cite security, privacy and compliance as the top barrier to scaling AI.

95% of CISOs feel pressure to suppress or delay compliance-related security issues when business deadlines are at stake.

89% of organizations expect increased regulation within five years or less, up from 66% in 2025.

There is a 20-point increase in organizations expecting new regulations within two to five years rather than beyond five years.

24% of IT professionals say AI policies are followed very consistently in day‑to‑day work.

47% of organizations cite maintaining audit trails for AI decisions as their biggest compliance concern.

Organizations that find compliance requirements very challenging have a breach rate of 82.4%, which is 14 percentage points higher than organizations with lower compliance difficulty (68.3%).

Regulatory fines average $51 million per organization.

57% of technology executives view regulatory fines as very or prohibitively disruptive.

Legal and Governance departments account for 19.5% of all AI hours, with 81% of that use occurring on enterprise plans.

Nearly half of legal leaders devote up to 40% of their workload to enterprise-wide risk and compliance.

67% of General Counsels report spending more time on enterprise-wide risk and compliance than a year ago.

49% of enterprises feel slightly or not at all prepared for upcoming AI-related regulations.

A quarter of legal leaders spend up to 60% of their time on enterprise-wide risk and compliance.

13% of enterprises feel highly prepared for upcoming AI-related regulations.

34% of CFOs prioritize compliance and governance as a top cloud-related priority for the next 12 months.