AI Governance Institute logo
AI Governance Institute

Intelligence for Compliance and GRC Teams

← News
Research2026-07-09

Multi-Tiered AI Governance Committees Tested at Scale: Banco Bradesco and TELUS Case Studies Reveal What Works

What happened

The AI Company Data Initiative released Responsible AI in Practice: AI Company Data Initiative Case Studies, a primary-source report documenting real-world AI governance implementations at two major enterprises operating across multiple jurisdictions. Banco Bradesco, one of Brazil's largest financial institutions, and TELUS, a Canadian telecommunications company, each contributed detailed accounts of their governance architectures, including the composition and mandate of strategic steering committees, the cadence and scope of quarterly operational reviews, and the specific mechanisms used to embed human-rights safeguards across the AI development lifecycle. The report identifies cross-functional alignment as a structural requirement rather than an aspiration, noting that both organizations developed role-specific training programs rather than relying on generalized AI literacy initiatives. Published under a global jurisdiction scope, the findings are intended as a transferable implementation model for enterprises building or maturing their own responsible AI programs.

Why it matters

  • ·Regulatory exposure: Human-rights-based safeguards are increasingly referenced in emerging AI regulations and procurement standards, and organizations that cannot demonstrate their governance structure embeds these considerations at the lifecycle level face heightened scrutiny under frameworks such as the EU AI Act and UNESCO AI Ethics Recommendation.
  • ·Operational impact: The two-tier committee structure documented here, separating strategic oversight from operational execution with defined review cadences, provides a concrete governance architecture that compliance teams can map against their existing controls and identify gaps in accountability chains.
  • ·Organizational risk: Role-specific AI training requirements, as implemented at both Banco Bradesco and TELUS, reduce the risk of misuse and accountability gaps across business units, and organizations relying on generic training programs may find those programs inadequate under regulator or auditor review.

Governance controls affected

BRD-002AI Governance Committee Charter and Decision RightsBRD-003Board-Level AI Safety Committee CharterBRD-005AI Governance Maturity AssessmentBRD-006AI Risk Tolerance and Appetite DocumentationBRD-010HOC-001AI Risk Classification

What to do now

  • ☐Map your current AI governance committee structure against the two-tier strategic and operational model documented for Banco Bradesco and TELUS, and identify any gaps in decision rights or escalation paths.
  • ☐Review your AI governance charter to confirm that human-rights considerations are explicitly embedded as a mandatory checkpoint at each stage of the AI system lifecycle, not addressed only at the policy level.
  • ☐Audit your AI training program to determine whether it differentiates by job function, and replace any single generalized module with role-specific curricula aligned to the responsibilities of each group interacting with AI systems.
  • ☐Establish a quarterly AI governance review cadence at the operational committee level if one does not already exist, with defined agenda items covering risk thresholds, incident review, and policy updates.
  • ☐Use the Banco Bradesco and TELUS case studies as a benchmark input to your next AI governance maturity assessment, documenting where your program aligns with and diverges from the structures described.

What to watch next

Compliance teams should monitor whether other major industry initiatives publish comparable case study reports, as regulators in the EU and Latin America have signaled increasing interest in using enterprise implementation evidence to inform guidance on what constitutes adequate governance structure. The AI Company Data Initiative may release additional sector-specific case studies covering industries beyond financial services and telecommunications, which would allow compliance teams to benchmark against peers more precisely. Enforcement actions and supervisory reviews in Brazil and Canada, where Banco Bradesco and TELUS operate, may increasingly reference governance architecture expectations that align with the multi-tiered committee model documented here.

Stay ahead of stories like this

Get every Global AI governance development like this one, plus the rest of the week's developments. Every Thursday.

Powered by Buttondown.

Related Coverage

Research2026-08-14

KPMG-UTS Case Study Sets a Practitioner Benchmark for AI Governance Operating Models

The University of Technology Sydney and KPMG published a joint case study documenting KPMG's practical experience building an enterprise AI governance program. The paper, part of UTS's Lighthouse series, details how governance controls, accountability structures, and operating arrangements were developed and implemented. It represents one of the few publicly available, practitioner-led implementation accounts from a major professional services firm.

Research2026-08-10

Bluewave's 90-Day Blueprint Gives Compliance Teams a Phased Governance Starter Model

Bluewave Technology Group has published a phased implementation guide outlining how organizations can stand up a foundational AI governance program within 90 days. The blueprint sequences controls across three phases, beginning with scope definition, a working group, an acceptable use policy, and an AI inventory, then adds ownership structures, approval tollgates, observability, and vendor and privacy review questions. It is designed as a practical starter model for compliance teams that have not yet formalized AI governance.

Research2026-08-17

Keyrus 2026 Guide Sets a Baseline Operating Model for AI Governance Programs

Consulting firm Keyrus has published a practitioner guide outlining how enterprises should structure AI governance programs in 2026, emphasizing four foundational elements: a complete AI inventory, risk-based prioritization, cross-functional governance teams, and oversight of vendor-supplied models. The guide provides a replicable operating model that compliance teams can adapt and pair with existing controls. It targets organizations at any stage of AI governance maturity.