Compliance pressure has a ‘very large impact’ on IT, CIOs warn
The steady increase in legislation is having an escalating effect on IT departments. One in four CIOs reports a ‘large’ impact, and one in three a ‘very large’ impact. This finding from Beltug’s 2025 Belgian Business ICT Market Study underlines how compliance pressure is mounting. While the need for legislation is understandable, CIOs criticise its heterogeneous application across sectors and countries.
19 / 01 / 26
Beltug’s 2025 Belgian Business ICT Market Study details the results of a broad survey of 1,159 respondents, with the findings discussed by a panel of ICT decision-makers during a round table discussion. The full downloadable report is available for members after login. Brief summaries are available (in French and Dutch), including a summary infographic (no login required). We have also published a 7-page report on the findings of the CIO panel here.
A wave of regulatory initiatives
From NIS2, DORA and GDPR to the AI Act, the Data Act, the CRA and an array of sectoral legislation, there’s a feeling within the IT sector that new rules are constantly being introduced. Compliance requires significant IT effort, and the impact on business is real.
As regulations multiply, securing Board support becomes more difficult – especially when it requires allocating extra resources and staff. But Boards have limited room to manoeuvre: “Top management takes compliance seriously,” notes one decision-maker. “There’s less and less appetite for residual risk.”
Differing interpretations
“The existence of regulations is a good thing in itself,” says one CIO. “The rules provide certainty and peace of mind.” But there’s a caveat: EU regulations are often interpreted differently across the Member States. This adds to the overall complexity, especially for companies that operate internationally.
Furthermore, some CIOs feel they are being put at a disadvantage against global competitors. “What about China and the US?” asks one CIO. “As European companies, we have to compete with those countries, while also complying with many more regulations and obligations.”
Unclear priorities
The real challenge often lies in the process of achieving compliance. “Frequently, there’s a lack of clarity about the actual expected effort,” according to one CIO. “These are lengthy processes, and it takes a long time before you know what you need to start with.” ‘Alarming’ press reports in the run-up to deadlines – often highlighting impending fines – only add to the pressure.
In the face of insufficient transparency, companies are managing priorities subjectively. A clear framework could provide the answer. One decision-maker specifies, “More precision regarding the timing of the various phases within European directives would be especially welcome.”
Compliance as a means, not an end
The CIOs stressed that compliance is not an end in itself. For example, uncertainty often arises between customers and suppliers about what they require from each other in terms of compliance. Yet these agreements are critical. As one puts it: “It’s often expensive to comply with regulations, but failure to comply means you can’t provide certain services.”
Meanwhile, companies are also facing internal concerns. Shadow IT ignores compliance requirements altogether. “But what can you do as an IT department to counter that? You can’t hermetically seal off the entire IT environment,” observes one CIO.
Are you ready?
Is your organisation up to speed with all EU regulations? How are you preparing for the new obligations on the horizon?
You, our members, form a rich bank of knowledge, and we at Beltug are committed to building on that strength. Share your insights with us here.