Data Sovereignty in the Age of Agentic AI: What security teams should know
Your infrastructure is on-prem, regionally hosted. Your prompts are not. What sovereignty and data protection mean once AI agents work inside the company.
Topic
When & Where
Details
Format:
Technology lecture
Language:
English
Session description
Speaker: Carlos Payés
European organisations have long answered the sovereignty question with geography: a regionally hosted data centre, servers on-prem, a named jurisdiction in the contract. Generative AI has quietly made that answer incomplete.
The real attack surface is no longer the data centre. It is the text box. An employee pastes a customer list into a chatbot to reformat it. A developer debugs proprietary code with an assistant's help. A finance manager has a draft contract summarised.
Each action is well-intentioned. Each takes seconds. Each moves regulated data outside the organisation's control, with no processing agreement, no retention guarantee, no log and no data protection review. None of it shows up in a cloud inventory, because no cloud service was ...
