Iron Mountain urges year-round UK data protection focus

Iron Mountain is urging UK organisations to treat data protection as a permanent strategic priority rather than an annual awareness exercise, as new figures point to a gap between public concern about privacy and actual behaviour.

Speaking ahead of Data Privacy Day, the information management company highlighted research that shows British consumers value control over their personal information but often fail to take consistent action to protect it. The company also linked weak data governance to significant financial losses for businesses and growing risks as they expand use of artificial intelligence.

"Data Privacy Day serves as an important reminder of the critical role data protection plays in building trust for organisations and enabling innovation. However, safeguarding data should be a year-round commitment, not just an annual observance," said Bernadette Wightman, UK & Ireland CEO, Iron Mountain.

Public attitudes

Iron Mountain cited fresh YouGov findings that point to what it describes as a privacy paradox. Consumers say data control matters, yet their protective actions lag behind their stated concerns.

"Recent YouGov research reveals a concerning paradox at the heart of British attitudes towards data privacy. While 52% of Britons say controlling who can access their data is very important, only 44% actually take moderate steps to protect it. As organisations increasingly turn to AI to drive competitive advantage and improve decision-making, the foundation of that success rests on robust data governance and privacy practices," said Wightman.

The data suggests that more than half of UK adults place high importance on deciding who can see or use their information. Less than half adopt regular safeguards such as adjusting privacy settings, using strong authentication, or limiting the data they share.

Unstructured risk

Iron Mountain said many organisations now hold large volumes of unstructured information that remain poorly managed. This includes internal communications, office documents, multimedia files and other records that often sit outside tightly controlled systems.

"The challenge is clear: organisations are sitting on vast amounts of unstructured data, including emails, documents, and images that hold immense potential but remain largely unmanaged. When data integrity falters, the cost is steep. According to research commissioned by Iron Mountain in 2025, UK organisations report average financial losses of £339,000 due to data integrity flaws, highlighting the real business impact of poor data governance," said Wightman.

The company's figures indicate that data quality failures, gaps in record-keeping or misclassified information can translate into substantial direct financial hits. These can include remediation costs, regulatory penalties, operational disruption and lost revenue opportunities.

AI and governance

Iron Mountain linked these data issues directly to the rapid deployment of AI tools across the UK economy. Many organisations are now training models on internal datasets and integrating AI into decision-making processes.

"Data Privacy Day acts as a reminder for organisations to assess and strengthen their data protection frameworks. As we navigate the evolving landscape of responsible AI and data protection, the industry is increasingly recognising that privacy governance must be at the heart of innovation. Julia Bonder-Le Berre, Iron Mountain's Head of Global Privacy, recently joined the International Association of Privacy Professionals (IAPP) AI Governance Advisory Board, reflecting the growing importance of aligning privacy with AI strategy across organisations," said Wightman.

The appointment places Iron Mountain's privacy lead within a global forum that focuses on AI governance and regulatory trends. It also signals the weight that information management and compliance functions now carry in corporate AI strategies.

Strategic investment

Iron Mountain called on boards and executive teams to view data protection as a core element of business resilience and innovation. The company said this requires dedicated funding, clear governance structures and consistent oversight across departments.

"The path forward requires investment in robust governance frameworks, the right technology solutions, and a commitment to making data protection integral to every organisation's strategy. This is how we build a future where data becomes a true asset, trusted, secure, and ready to drive meaningful innovation." said Wightman.