Mary Hartwell advises boards and enterprise leaders on where AI governance failures turn into balance-sheet events, and where the absence of governance is quietly the biggest brake on AI value capture. She turns the enforcement record and the deployment data into a practical case for acting now.
Regulators across three continents have shown both the willingness and the legal infrastructure to impose penalties that are material even to the largest technology companies. The pattern is consistent: organizations that could not show a documented AI or data governance program paid the most — and paid it in public.
The research is just as clear in the other direction. Organizations don't stall AI because the technology fails — they stall because they have no governance framework they trust enough to let AI reach production. That hesitation has a price tag too.
Global Practice Leader who has built data governance programs from zero at United Technologies, II-VI, Axiall, and Syniti — 2026 Data Governance Solution of the Year award winner, and published author on AI readiness and data governance.
Mary Hartwell has spent her career building data governance programs at some of the world's largest enterprises — not frameworks on a shelf, but operating programs with councils, stewardship structures, domain governance, and teams who know how to run them. She founded the Data Governance Council and Data Governance Office at United Technologies, built the MDM and governance team from scratch at II-VI, and most recently led Syniti's global Data Governance practice across three regions. Before that, she spent five years inside IBM's most complex SAP S/4HANA transformation programs, running data migration and master data governance on timelines that couldn't afford bad data.
Her thesis, sharpened across two decades in the field: governance isn't a compliance project — it's the infrastructure that makes AI, analytics, and transformation possible. Companies that want to do AI well have to get their data right first. Her writing on data governance, AI readiness, and data literacy has appeared in NODE Magazine, the Syniti Blog, Connectivity for IR, and TechNovice, and her work was recognized with the 2026 Data Governance Solution of the Year Award.
The rules governing high-risk AI are no longer hypothetical — they are on the calendar.
EU AI Act enters into force, establishing the first comprehensive AI-specific enforcement regime.
Enforcement begins on prohibited AI practices — social scoring, real-time biometric surveillance, subliminal manipulation.
High-risk AI compliance obligations take effect: conformity assessments, technical documentation, audit logs, and human oversight required for HR, credit, healthcare, and education AI systems.
Notified-body conformity assessments and anticipated US federal AI legislation raise the bar further — organizations that govern early set the baseline; those that wait play catch-up.
Mary Hartwell speaks to boards, executive teams, and industry audiences on what AI governance actually costs to skip — and what it earns when done well.
hello@hartwellandcompany.com