Data debt is an enterprise problem. The EU just made it visible first.

This piece makes the case that data debt, not model choice, is the real constraint on enterprise AI today, using the EU AI Act’s recent timeline shift as the clearest current proof point rather than the story itself. Read it for the accurate figures worth citing in a board conversation, a clear-eyed list of what your data governance program currently doesn’t reach, and a payback-ordered plan for closing that gap, regardless of which regulatory clock applies to you.

AI is moving faster than enterprise data readiness. The EU AI Act is one of the clearest signals of where data governance is heading, but global organizations don’t need to wait for regulation to confront the problem.

Every enterprise racing to deploy AI is running into the same wall, and it isn’t a regional one: the data underneath the AI isn’t ready for what’s being asked of it. Only one in ten CFOs fully trust their enterprise data, and that gap doesn’t stop at any border. The clearest live example of what happens when the gap gets exposed by regulation, instead of by an outage or a bad customer interaction, is playing out in the EU right now.

The EU AI Act’s high-risk obligations were meant to apply from 2 August 2026. On 27 July, six days out, the Digital Omnibus on AI entered into force and moved the deadline for standalone Annex III systems to 2 December 2027. AI embedded in regulated products under Annex I got until August 2028. The date moved because the machinery to comply didn’t exist: harmonized standards from CEN and CENELEC weren’t finished, the conformity-assessment infrastructure the Act assumes hadn’t matured, and several member states still hadn’t designated national competent authorities. The Article 50 transparency duties, meanwhile, weren’t deferred at all; those applied on 2 August exactly as originally scheduled, with a second tranche applying to systems already on the market from 2 December 2026.

Whether or not the EU AI Act applies to your organization, the mechanism it just exposed does. The regulatory calendar isn’t really the story, though.

The hardest requirement in a high-risk AI regime isn’t a property of your model. It’s a property of your data: for any given output, can you say what data produced it, where that data came from, who was permitted to see it, and can you show your working?

Most enterprises can’t. Not for want of governance; most have a governance function, a catalog, stewards, a certification cycle. They can’t because all of that was built to govern things that sit still, and the things their AI actually reads don’t.

The industry has been telling enterprises to fix their data quality for years to approximately no effect, so skepticism is fair when the same advice comes back wearing an AI badge. Something did change, though, and it’s worth being specific about what.

Business intelligence was forgiving in two ways. Both cushions are now gone.

The first is arithmetic. Reporting aggregates. A month-end revenue figure sums a million rows, so a thousand bad ones vanish into rounding. Retrieval doesn’t aggregate; it surfaces the single chunk that scored highest. If that chunk is the 2019 pricing schedule nobody deprecated because nothing was reading it, that’s what the customer gets told. The underlying error rate didn’t move. Exposure to any individual error went from one-in-a-million to one.

The second cushion was a person. Somewhere in every reporting chain there’s an analyst who has been staring at these numbers for six years, who glances at a figure, thinks that’s wrong, and goes and checks before anyone acts on it. She was never on the architecture diagram. She was load-bearing anyway. An agent that reads a document, calls three tools, and writes to a system of record does not pause for her.

That’s the mechanism behind IDC’s 2026 CIO Agenda prediction that CIOs who delay data debt remediation will see 50% higher AI failure rates by 2027, alongside rising costs, as model underperformance drags siloed and redundant data into view. Hrishikesh Pippadipally, CIO at advisory firm Wiss, put the mechanism in one sentence:

AI doesn’t create data problems; it exposes and accelerates them.

Enterprise data governance assumes data sits still. Tables in a warehouse. Schema changes through a change advisory board. Quarterly certification, a steward per domain, a catalog somebody updates. That works when the governed object is stable enough to be governed at human cadence.

Now list what an AI system actually reads.

Your policy covers the customer table. Does anything cover the vectors derived from it? They live in a different store, usually under different access control, and in most enterprises no classification scheme has ever touched them.

Try a concrete question: when a record is deleted under a GDPR Article 17 erasure request, does the embedding go too? Can you even locate it? Most vector indexes were stood up by an AI team on a timeline that never routed through data governance, and deletion in an ANN index is often a tombstone rather than a removal; the vector stays resident until a compaction that may not be scheduled.

If you’re inclined to treat embeddings as safely anonymized derivatives, the research disagrees. Morris and colleagues showed with vec2text that iteratively correcting and re-embedding candidate text recovers 92% of 32-token inputs exactly, and pulled full names out of embeddings of clinical notes. A 2025 reproducibility study replicated the core results; the code is public. An embedding of personal data behaves, for practical purposes, like personal data. Very few data protection impact assessments say so.

Transient, frequently rebuilt, often materialized outside the warehouse entirely. A quarterly certification cycle is certifying an object that has been regenerated forty times since anyone last looked at it.

Policies written for batch loads with defined windows don’t map onto continuous flows where “the data as of when” has no clean answer.

If you want evidence this is structural rather than fashionable, look at where the money went. Salesforce closed its acquisition of Informatica on 18 November 2025: catalog, integration, governance, quality, privacy, metadata management and MDM, explicitly positioned as the data foundation for agentic AI. Marc Benioff’s framing was blunt:

You have to get your data right to get your AI right.

The same month, Snowflake moved to acquire Select Star, folding automated metadata context and lineage into Horizon Catalog and, the interesting part, extending its reach outside Snowflake, into PostgreSQL, MySQL, Tableau, Power BI, dbt and Airflow. Coalesce acquired CastorDoc on similar logic.

Read together, the pattern is hard to miss: the platform vendors have decided metadata and lineage are the substrate agentic AI runs on, and they’re buying rather than building because they don’t believe they have time to build. Gartner expects 70% of organizations to adopt modern data quality tooling by 2027 to support AI.

There’s a caution buried in this for buyers. As governance capability gets absorbed into the platforms, you have to decide how much of your governance posture you want defined by a single vendor, particularly in genuinely heterogeneous estates, which is most of them. The consolidation validates the problem. It isn’t automatically the answer to it.

Roughly in order of how fast they pay back.

Data debt doesn’t demo. There’s no launch event, and nobody gets promoted for the incident that didn’t happen. It competes for budget against things with screenshots.

But four constituencies with nothing much in common have converged on the same conclusion in the past nine months. Practitioners rank data quality above AI itself. CFOs fund AI while trusting their data at a rate of one in ten. Platform vendors are spending billions acquiring metadata companies. And regulators postponed their flagship deadline because the compliance infrastructure didn’t exist yet.

Models are increasingly rentable by the token. What isn’t rentable is the ability to answer a plain question about any output you put in front of a customer, a regulator, or a board: where did this come from, and can you prove it?

You can’t buy that answer. Building it takes roughly as long as most compliance windows give you, EU included, which is exactly why waiting for a deadline is the expensive way to find that out.

The throughline is simple, even if the mechanics aren’t: enterprises are moving faster on AI than their data can support, and regulation is only the most visible place that gap is now surfacing. Retrieval exposes the errors aggregation used to hide, the objects your AI reads have already outgrown the objects your governance program covers, and every constituency with money or oversight on the line, CFOs, platform vendors, regulators, practitioners, has independently reached the same conclusion. The EU AI Act’s extension is worth understanding accurately, but it isn’t the question that should be driving your roadmap. The one that matters doesn’t need a regulator to ask it: is your data ready for the AI you’re trying to deploy?