63% of UK Businesses Strengthen Privacy After Implementing AI, Yet Only a Third Have Made Significant Changes

Zoho survey reveals most organisations act ‘reactively’ rather than ‘proactively’ to AI privacy challenges

While nearly two-thirds (63 per cent) of UK organisations report strengthening privacy measures after adopting artificial intelligence (AI), only around a third (34 per cent) classify their improvements as significant, according to a new survey from global technology leader, Zoho.

The research highlights that most of these organisations are being reactive rather than proactive, when it comes to AI and privacy, often strengthening privacy measures only after encountering issues. This leaves them exposed to potential data breaches and operational risks if AI systems are not safeguarded from the outset.

The findings are based on a nationwide survey from Zoho commissioned via Arion Research LLC, which gathered responses from 363 UK business leaders across small, mid-market, and large enterprises. The survey focused on organisations’ AI adoption, privacy practices, workforce readiness, and governance approaches, providing a representative snapshot of current attitudes and practices toward AI privacy in the UK.

Overall, 37% of respondents cite privacy and security concerns as a barrier to AI adoption. Customer data breaches remain the leading privacy concern for UK organisations, with 44 per cent of respondents ranking them as their top worry. This intense focus has fuelled significant investment in privacy infrastructure, with 85 per cent of organisations now reporting dedicated privacy officers or teams.

However, this ‘fortress’ mentality risks overlooking other critical challenges, such as algorithmic transparency, bias in AI, and the retention of training data – issues that are just as vital to building meaningful protection and long-term trust.

Workforce readiness remains a significant challenge. Only around 20 per cent of respondents have formally trained just 0-10% of their workforce, and only 8% have formally trained 90-100% of their workforce. This leaves many organisations reliant on informal “learn-as-you-go” practices.

Respondents cited data analysis (56 per cent), prompt engineering (44 per cent), and AI literacy (37 per cent) as their top upskilling priorities, demonstrating the urgent need to build in-house expertise to make privacy measures meaningful and enforceable when it comes to AI. Overall, 32% of respondents cite lack of technical expertise as a barrier to AI adoption.

Transparency, fairness, and governance gaps remain a challenge across UK businesses. Only 48 per cent of organisations have documented AI use policies, and just 45 per cent have documented explainability requirements for AI decisions. These gaps make it harder for companies to maintain trust and ensure clear accountability, highlighting the need for stronger AI governance.

Sachin Agrawal, Managing Director, Zoho UK commented – “It is still early in terms of business AI adoption but it is expected to become more pervasive. However, organisations need to make step changes in order to mitigate risk and use AI effectively to increase positive impact. This research shows that while many UK organisations are strengthening privacy measures, too often these steps are taken reactively rather than through forward-looking planning.

It’s encouraging that most businesses have dedicated privacy officers in place, but without the right training, governance, and clear AI use policies, these efforts may not translate into meaningful protection. To unlock AI’s full potential, organisations must go beyond compliance, embedding transparency, investing in workforce skills, and building well-defined data strategies that both safeguard information and maintain customer trust.”

State of UK AI adoption

The survey shows UK organisations are demonstrating sophisticated adoption of AI across three key categories: traditional AI, generative AI, and agentic AI. Generative AI has achieved the highest implementation rates, driven by practical business applications such as customer support (67 per cent), content creation (66 per cent), and code generation or development assistance (62 per cent).

Traditional AI remains well-established, with mature implementations in predictive analytics (64%), customer segmentation (63 per cent), and recommendation systems (60 per cent). Meanwhile, autonomous AI, though newer, is rapidly gaining traction, with adoption in personalised customer journeys (58 per cent), autonomous decision-making and intelligent RPA (61 per cent), and strategic planning assistance (63 per cent).

UK organisations are adopting AI through a strategic, staged approach, ranging from personal use of public language models to advanced, organisation-wide integration. Respondents favour a hybrid sourcing strategy, combining commercially available solutions with bespoke applications developed internally or with external partners, allowing them to select the best-fit solution for their needs.

AI investment is focused on areas with clear business impact. Top priorities cited by respondents include embedding AI into enterprise applications, developing hybrid or custom solutions, and in-house development. Key application areas are customer service (43 per cent), software development and coding (41 per cent), fraud detection (34 per cent), automation (31 per cent), marketing (30 per cent), and product development (29 per cent), highlighting a pragmatic approach that prioritises measurable ROI and direct business benefits.

Read more about Zoho’s privacy commitment here: https://www.zoho.com/privacy.html.

Zoho operates its own datacentres across the world, including two in Europe.

Zoho UK recently achieved Cyber Essentials Plus certification, a UK Government backed scheme that will help protect the company against a whole range of the most common cyber attacks.

For more information, please visit www.zoho.com

Please follow and like us: