In September 2026, major music publishers filed a detailed complaint against a leading AI lab and its founders personally, seeking substantial per-work damages over training data. It’s one of several suits working through the courts, and the broader signal is consistent: after two years of focus on model capability, the contested ground is shifting to data rights, provenance and human review.
By mid-2026, governments were signing bilateral deals treating AI compute as national infrastructure. That framing has a smaller-scale version every organisation should think about. “AI sovereignty” gets used in two overlapping ways, and it’s worth separating them. At the national level, it’s about a country’s ability to develop, host, and govern AI capability without depending entirely on foreign infrastructure or providers. At the organizational level — the one that affects most engineering and IT leaders directly — it’s a narrower and more practical question: when your product sends data to a model, where does that data actually go, who can access it, and what happens to your business if that arrangement changes without your consent?