Data Governance in a Digitally Regulated Future

Blogs and Articles

Discover insights from Julia Bonder-Le Berre at Arkfest 2025 on bridging the data divide. Learn how interoperability, governance, and AI readiness shape the future of information management in line with EU and UK digital data regulations.

4 September 2025

Bridging the Data Divide: A Thought Leadership View on Data Governance in a Digitally Regulated Future

In an era where data is being generated at an unprecedented rate, unlocking its potential and driving value from it in the rapidly evolving regulatory landscape is no small feat. Julia Bonder-Le Berre, Head of Global Privacy at Iron Mountain, offers timely and vital insights into this challenge. In a compelling Arkfest Digital Conference for Archiving and Preservation 2025, she articulated the pressing need for organisations to anticipate the impact of the European and UK digital data regulations on their data governance and procurement strategies.

The Dual Challenge: Explosion of Data & Regulatory Complexity

Between 2018 and 2025, global data volumes surged by over 500%, from 33 to 175 zettabytes. Yet, the vast majority (80-90%) of this information remains unstructured, undiscovered and underutilised. Julia emphasises that this sea of information, often buried in paper records or scattered across digital silos, represents an untapped asset. Governments and businesses recognize this opportunity, and are now urgently working to harness this latent value of information for both commercial and public-good purposes.

Regulations are catching up fast. The EU and UK are rolling out far-reaching rules to facilitate a single data market, mandating interoperability, accessibility, and data portability. For example, the European Health Data Space (EHDS) regulation, set to begin enforcement in 2026, aims to unify the approach to health data across 27 countries. A similar trajectory is being seen in the UK with the Data Use and Access Bill.

Interoperability is the Cornerstone of Modern Data Strategy

At the heart of these regulations is a commitment to data interoperability. As Julia rightly points out, the ability to standardise data formats and develop interoperable IT systems is no longer a technical ambition; it's a regulatory imperative.

For data to move seamlessly between systems, whether across departments or borders, organisations will need to undergo a comprehensive review of their infrastructure. This entails modernising legacy platforms, adopting structured metadata schemes, and ensuring that data is digitised in formats compliant with forthcoming standards.

From Paper to Platform: Unlocking Hidden Value

A particularly powerful point from Julia's presentation was the overlooked value locked in physical archives. Many organisations store vast amounts of paper records without a full grasp of their content. Iron Mountain, as a global leader in information management, offers intelligent document processing services powered by AI. These tools are instrumental in converting unstructured physical data into accessible, secure, and usable digital assets.

By bridging the gap between physical and digital repositories, organisations not only mitigate compliance and data security risks but also create opportunities for data analytics and AI training.

Why the Stakes Are So High: AI and the Data Foundation

Julia makes a crucial observation: the success of AI is inextricably linked to the quality and governance of the underlying data. The newly enacted EU AI Act introduces a tiered risk framework, distinguishing between prohibited, high-risk, and low-risk AI systems. No matter the tier, the through-line is clear: data integrity and traceability are foundational.

As AI becomes more pervasive in both public services and enterprise applications, poor data quality will not be offset by large volumes. Organisations must invest in data governance frameworks that ensure consistency, accuracy, and accountability across their datasets.

Preparing for What Comes Next: Strategic Recommendations

Based on Julia's insights, here are key strategic actions organisations should consider:

Audit and Classify Unstructured Data: Conduct thorough audits of both physical and digital records. Classify what must be retained, digitised, or safely disposed of.
Modernise Infrastructure: Adopt systems designed for interoperability and compliant with emerging EU and UK data standards.
Embed Privacy by Design: Ensure systems empower individuals with control over their data, including access, accuracy, and portability.
Engage with Legal and Compliance Teams: Stay ahead of regulatory developments by integrating legal foresight into procurement and data strategy.
Invest in AI-Ready Governance Models: Ensure data is high-quality, well-structured, and ethically managed to serve as a reliable foundation for AI initiatives.

Looking Ahead: The Role of Data Professionals

As Julia concludes, the evolving data landscape will redefine the role of data professionals. From custodians of information to architects of strategic value, they must now collaborate more closely with compliance, legal, IT, and executive leadership. In a future defined by interconnected data ecosystems, their influence will only grow.

Organisations that embrace this change, bridging their physical and digital records, aligning with regulatory mandates, and cultivating robust governance, will be best positioned to innovate, compete, and deliver public value.

Iron Mountain stands ready to support this transition, offering the expertise and technology to manage the full lifecycle of information assets in a secure, compliant, and value-generating way.