283 views
Photo from Pexels by Anna Shvets.

Nearly all IT leaders say AI accessed sensitive data without permission

Singapore ranks second globally for unauthorised AI data access.

Nearly all Singaporean IT leaders (98.9%) said an AI tool or agent accessed sensitive data beyond its intended scope in the past year, the second-highest rate across eight markets surveyed, according to the 2026 Identity Security Report by Delinea.

The findings draw on two global surveys of 2,254 IT and security leaders and 2,250 non-IT employees at organisations of 500 or more employees that use AI, across the UK, US, Germany, Australia, Singapore, UAE, France and India.

Despite near-universal policy adoption, with 99.6% of Singaporean organisations having a formal policy governing AI data access, enforcement in practice remains thin.

Only 14% of Singaporean IT leaders said they can detect a scope violation as it happens, below the global average of 19%. Some 72% of Singaporean organisations take a full day or longer to catch an out-of-scope access event, the highest globally.

Employee behaviour is compounding the risk. Some 84% of Singaporean employees said they have bypassed the required approval process for using AI at some point, with 51% saying they do so always or regularly.

Three in four said they have felt pressured to use AI on sensitive or confidential data even when they were unsure it was permitted, the third-highest rate globally.

Accountability gaps persist. Whilst 98.8% of Singaporean organisations require named-individual approval for at least some sensitive AI use, just 38% of IT leaders said they can always trace a sensitive access event back to a named human authoriser.

Join Singapore Business Review community
Join Singapore Business Review community
A NOTE FROM SINGAPORE BUSINESS REVIEW

Reaching the people who run Asia's businesses is harder than it used to be.

Inboxes are crowded. Attention is short. The executives you most want to reach — the founders, CFOs, and operators who actually move budgets — are the hardest to find through the usual channels. If you're building a company, a category, or a reputation, you already know this.

We've spent twenty years building the room they read. Singapore Business Review is where senior decision makers in Singapore and across Southeast Asia come for business coverage they can't get elsewhere — in print, online, and in person at the summits and roundtables we host across seven markets.

If you have something these readers should know about — a point of view worth publishing, a product worth their attention, an event worth their time — we'd like to hear what you're trying to do.