drj logo

"*" indicates required fields

This field is for validation purposes and should be left unchanged.
Name*
Zip Code*
Please enter a number from 0 to 100.
Strength indicator
I agree to the Terms of Service and Privacy Policy*
Yes, of course I want to receive emails from DRJ!

Already have an account? Log in

drj logo

Welcome to DRJ

Already registered user? Please login here

Login Form

Register
Forgot password? Click here to reset

Create new account
(it's completely free). Subscribe

x
Skip to content
Disaster Recovery Journal
  • EN ESPAÑOL
  • SIGN IN
  • SUBSCRIBE
  • THE JOURNAL
    • Why Subscribe to DRJ
    • Digital Edition
    • Article Submission
    • DRJ Annual Resource Directories
    • Article Archives
    • Career Spotlight
  • EVENTS
    • DRJ Spring 2026
    • DRJ Fall 2026 Call for Presentations
    • DRJ Fall 2026
    • DRJ Scholarship
    • Tracey Rice Memorial Scholarship
    • Other Industry Events
    • Schedule & Archive
    • Send Your Feedback
  • WEBINARS
    • Upcoming Webinars
    • On Demand
  • MENTOR PROGRAM
  • RESOURCES
    • New to Business Continuity?
    • White Papers
    • DR Rules and Regs
    • Planning Groups
    • DRJ Glossary of Business Continuity Terms
    • Careers
    • The BCI Partnership
  • ABOUT
    • About DRJ
    • 2026 Media Kit
    • Board and Committees
      • Executive Council Members
      • Editorial Advisory Board
      • Career Development Committee
      • DEI
      • Glossary Committee
      • Rules and Regulations Committee

Tonic.ai Research: 70% Say Privacy Restrictions Limit AI Innovation Despite Strong Compliance Confidence

by Jon Seals | April 8, 2026 | | 0 comments

New report reveals privacy and compliance concerns are slowing access to the data needed to build, train, and scale AI systems

SAN FRANCISCO – Tonic.ai today released its new report, State of Data Privacy in AI Development, revealing that data privacy is no longer just a governance concern, but a growing blocker to AI development velocity.

Based on a Q1 2026 survey of 232 business and technical leaders, the report finds that while enterprise AI adoption is well underway, many organizations are struggling to move at the speed the current moment demands. As AI reshapes competitive dynamics across industries, the ability to build, iterate, and deploy faster has become a strategic imperative; and data privacy has emerged as the primary constraint holding teams back.

Among the report’s findings:

  • 46.6% of respondents said data privacy, legal liability, or regulatory compliance is their top concern related to AI
  • 52.1% said privacy or compliance concerns frequently or very frequently slow or block their ability to use unstructured data for model development
  • 69.8% said privacy restrictions limit their organization’s ability to innovate with AI
  • 33.6% said significant manual data preparation or redaction is the biggest impact of privacy concerns on AI projects
  • Nearly 86% reported having at least one AI or machine learning system already in production

“AI progress is not being held back by a lack of ambition,” said Adam Kamor, Co-founder and Head of Engineering at Tonic.ai. “It’s being held back by the inability to safely access and use the data that would make AI systems more accurate, more useful, and more reflective of the real world. Privacy has become a velocity problem. The organizations that solve it will be the ones that scale AI faster.”

The report introduces what Tonic.ai calls the AI Data Access Maturity Curve, a framework that describes how organizations typically evolve from using structured data, to higher-value but harder-to-govern unstructured data, and ultimately toward privacy-safe and synthetic approaches that make AI development more scalable. The research suggests that many enterprises are currently stuck in the middle stage, where the most valuable data is also the most operationally difficult to use.

The research also surfaces a striking paradox: 94.9% of respondents are confident their use of internal data complies with current AI regulations; yet nearly 70% say privacy restrictions are still limiting their ability to innovate. Compliance, it turns out, is not the same as capability. Organizations may have the policies in place, but that hasn’t translated into the operational freedom AI teams need to move fast.

“Most organizations are not blocked from building AI systems. They’re blocked from scaling them,” Kamor added. “The challenge now is not whether teams want to use AI. It’s whether they can unlock the right data quickly enough, safely enough, and at the level of realism required for production.”

This shift is already underway. Nearly a third of respondents (31%) report using synthetic data tools extensively, and 54.3% are exploring them in limited or experimental ways; a signal that the industry is actively looking for a way out of the bottleneck. Organizations are moving beyond patching the problem with manual redaction and starting to treat privacy as something that can be engineered into the development process from the start.

AI is reshaping competitive advantage in real time, and the organizations that figure out how to safely unlock their data will be the ones that build better models, ship faster, and pull ahead. Those that don’t will keep losing ground to the operational friction that’s slowing them down; not because of lack of effort, but because they can’t access the data they need to act on it.

The full report, including detailed findings and methodology, is available for download here.

About Tonic.ai

Tonic.ai empowers developers while protecting customer privacy by enabling companies to create safe, synthetic versions of their data for use in software development, model training, and AI implementation. Founded in 2018, with offices in San Francisco, Atlanta, New York, and London, the company is pioneering enterprise tools for data transformation, de-identification, synthesis, and subsetting, in pursuit of its mission to make data usable. Thousands of developers use data generated with Tonic on a daily basis to build their products faster in industries as wide ranging as healthcare, financial services, logistics, edtech, and e-commerce. Working with customers like eBay, Cigna, American Express, and Volvo, Tonic.ai innovates to advance its goal of advocating for the privacy of individuals while enabling companies to do their best work. For more information, visit https://www.tonic.ai or follow /tonicfakedata on LinkedIn.

Related Content

  1. Quantifying Cybersecurity Risk in Alumni CRM Systems
    Quantifying Cybersecurity Risk in Alumni CRM Systems
  2. Disaster Recovery Journal
    Leveraging Academia for Risk Identification and Response
  3. How Training Improves Applicant Compliance and Disaster Grant Outcomes
    How Training Improves Applicant Compliance and Disaster Grant Outcomes

Recent Posts

DuploCloud Strengthens Enterprise Trust Position with SOC 2 Type II and ISO/IEC 42001 Milestones

April 16, 2026

Keeper Security Launches Enterprise-Grade Approval Governance and Real-Time Visibility for Endpoint Privilege Management

April 16, 2026

ONEKEY: Vulnerability Management and SBOM Generation Are Key to CRA Compliance

April 16, 2026

Compliance Breakthrough at Dauphin Island leads to CRS Class Improvement

April 15, 2026

Fiverr Data Leak Exposes Sensitive Documents – Expert Commentary

April 15, 2026

Sentra Integrates with Wiz to Discover, Prioritize and Eliminate Cloud and AI Data Risk

April 15, 2026

Archives

  • April 2026 (37)
  • March 2026 (89)
  • February 2026 (76)
  • January 2026 (61)
  • December 2025 (45)
  • November 2025 (58)
  • October 2025 (78)
  • September 2025 (65)
  • August 2025 (59)
  • July 2025 (70)
  • June 2025 (54)
  • May 2025 (59)
  • April 2025 (91)
  • March 2025 (57)
  • February 2025 (47)
  • January 2025 (73)
  • December 2024 (82)
  • November 2024 (41)
  • October 2024 (87)
  • September 2024 (61)
  • August 2024 (65)
  • July 2024 (48)
  • June 2024 (55)
  • May 2024 (70)
  • April 2024 (79)
  • March 2024 (65)
  • February 2024 (73)
  • January 2024 (66)
  • December 2023 (49)
  • November 2023 (80)
  • October 2023 (67)
  • September 2023 (53)
  • August 2023 (72)
  • July 2023 (45)
  • June 2023 (61)
  • May 2023 (50)
  • April 2023 (60)
  • March 2023 (69)
  • February 2023 (54)
  • January 2023 (71)
  • December 2022 (54)
  • November 2022 (59)
  • October 2022 (66)
  • September 2022 (72)
  • August 2022 (65)
  • July 2022 (66)
  • June 2022 (53)
  • May 2022 (55)
  • April 2022 (60)
  • March 2022 (65)
  • February 2022 (50)
  • January 2022 (46)
  • December 2021 (39)
  • November 2021 (38)
  • October 2021 (39)
  • September 2021 (50)
  • August 2021 (77)
  • July 2021 (63)
  • June 2021 (42)
  • May 2021 (43)
  • April 2021 (50)
  • March 2021 (60)
  • February 2021 (16)
  • January 2021 (554)
  • December 2020 (30)
  • November 2020 (35)
  • October 2020 (48)
  • September 2020 (57)
  • August 2020 (52)
  • July 2020 (40)
  • June 2020 (72)
  • May 2020 (46)
  • April 2020 (59)
  • March 2020 (46)
  • February 2020 (28)
  • January 2020 (36)
  • December 2019 (22)
  • November 2019 (11)
  • October 2019 (36)
  • September 2019 (44)
  • August 2019 (77)
  • July 2019 (117)
  • June 2019 (106)
  • May 2019 (49)
  • April 2019 (47)
  • March 2019 (24)
  • February 2019 (37)
  • January 2019 (12)
  • ARTICLES & NEWS

    • Business Continuity
    • Disaster Recovery
    • Crisis Management & Communications
    • Risk Management
    • Article Archives
    • Industry News

    THE JOURNAL

    • Digital Edition
    • Advertising & Media Kit
    • Submit an Article
    • Career Spotlight

    RESOURCES

    • White Papers
    • Rules & Regulations
    • FAQs
    • Glossary of Terms
    • Industry Groups
    • Business & Resource Directory
    • Business Resilience Decoded
    • Careers

    EVENTS

    • Fall 2026
    • Spring 2026

    WEBINARS

    • Watch Now
    • Upcoming

    CONTACT

    • Article Submission
    • Media Kit
    • Contact Us

    ABOUT DRJ

    Disaster Recovery Journal (DRJ) is the leading resource for business continuity, disaster recovery, crisis management, and risk professionals worldwide. With a global network of more than 138,000 practitioners, DRJ delivers essential insights through two annual conferences, a quarterly digital magazine, weekly webinars, and a rich library of online resources at www.drj.com. Our mission is to empower resilience professionals with the knowledge, tools, and connections they need to protect their organizations in a fast-changing world. Join our community by attending our events, subscribing to our publications, and following us on social media.

    LEARN MORE

    LINKEDIN AND TWITTER

    Disaster Recovery Journal is the leading publication/event covering business continuity/disaster recovery.

    Follow us for daily updates

    LinkedIn

    @drjournal

    Newsletter

    The Journal, right in your inbox.

    Be informed and stay connected by getting the latest in news, events, webinars and whitepapers on Business Continuity and Disaster Recovery.

    Subscribe Now
    Copyright 2026 Disaster Recovery Journal
    • Terms of Use
    • Privacy Policy

    Register to win a Free Pass to DRJ Fall 2026 | Resilience In Motion

    Leave your details below for a chance to win a free pass to DRJ Fall 2026 | Resilience In Motion. The winner will be announced on July 30. Join us for DRJ's 75th Conference!
    Enter Now