How could the findings on AI governance among European SMBs affect the European Commission?
The European Commission may accelerate AI governance rules due to SMB adoption gaps The Pax8 report found that while two-thirds of AI-engaged small and medium-sized businesses in Europe have built AI solutions, governance has not kept pace. Specifically, 35% of these businesses discovered 'shadow AI'—tools or agents running without official approval—in the past six months. Since the European Commission is the executive and regulatory body for the EU, this systemic lack of formal review, which tops out at 45% across surveyed markets, could pressure the Commission to accelerate its efforts to inventory, secure, and govern the AI being built by SMBs.
- Effect
- Mild negative
- How direct
- Brind's reasoning
- When
- Within months
- The story
- Gone quiet
How it reaches European Commission
-
Pax8 released the Q3 2026 SMB AI Pulse Report, which surveyed small and medium businesses across Europe and Sweden. The report found that two-thirds of AI-engaged small businesses have developed one or more AI solutions now in regular use. However, 35% of these businesses discovered unapproved tools or workflows running in their operations within the last six months, and formal review of internally built AI tops out at 45% across all markets surveyed.
The full event1independent outlet -
The identified systemic lack of formal review and the top-cited risk of data security or privacy exposure (30% to 35%) among employee-built AI requires the European Commission, as the EU's regulatory body, to address the vacuum and help SMBs inventory, secure, and manage the economics of the AI they are now building.
No report states this step directly. Brind drew it from the reporting on each side of it, so treat it as an informed guess.
-
executive branch of the European Union
Everything about European Commission
Tap any step to see the evidence behind it.
The facts so far
As reported. Each one links to where it comes from.
- Pax8 surveyed 1,150 small business leaders across the United States, United Kingdom, Germany and Sweden.manilatimes.net
- Two-thirds of AI-engaged SMBs have developed one or more AI solutions now in regular use.manilatimes.net
- 35% of AI-engaged businesses discovered shadow AI in the past six months.manilatimes.net
- Formal, documented review of internally built AI tops out at 45% across all markets surveyed.manilatimes.net
- Data security or privacy exposure is the top-cited risk of employee-built AI in every market (30% to 35%).manilatimes.net
Why it matters
The findings underscore a significant operational challenge for small and medium-sized businesses across Europe. While AI adoption is accelerating—with 66% of SMBs stating their business will not remain competitive without it in the next three years—the lack of internal governance creates substantial risks, particularly concerning data security and unapproved AI usage.
This situation is not unique to Europe; the survey included the United States, where 81% of AI-engaged businesses have built solutions now in use. However, the European Commission must navigate the specific regulatory landscape of the EU, where the need for unified rules is critical to manage the risks associated with decentralized, rapidly deployed AI solutions across member states.
What we don't know yet
- Will the European Commission issue specific guidance or regulatory updates based on the survey findings?
- How will the Commission balance the need for regulation with the SMBs' stated need to move immediately to remain competitive?
Is this still moving?
- Reports
- 2
- Developments
- 1
- Repetition
- 50%
What would change this answer
— Other considerations
Beyond this explainer
Explore connected ideas
Each opens in Related concepts: what the web connects to it, with Brind's news on it.
The ideas come from how millions of web pages place them near each other. The questions are Brind's AI reasoning, written only from this explainer and Brind's own reporting.
Who else could feel it
Other possible ripples from the same event.
Reporting
- manilatimes.netOct 12
Keep going
Brind's analysis is written by AI from the reporting linked above and can be wrong. This explainer is a possibility worth considering, not a forecast: steps marked as Brind's reasoning are not stated in the reporting. It is not investment advice; do your own research.