1. Platform economy transition: Moving from connectivity sales to platform services requires a different revenue model. AI is both product and instrument — the complexity is twofold. Governance must address both dimensions.
2. IoT data governance: Enterprise IoT generates enormous data volumes. GDPR, sector-specific regulation and contractual data ownership make AI governance for IoT platforms complex and under-addressed.
3. Cybersecurity AI threats: AI is deployed for both attack and defence. Managed security providers must offer AI-driven threat detection while themselves complying with NIS2 and the EU AI Act — a dual responsibility.
4. EU AI Act provider classification: The EU AI Act classifies providers of AI services as "provider" with full conformity obligations. This is a critical insight that most digital service providers have not yet recognised.