Same CCC. Different Executive Problem.

Public and private AI are both rated CCC in the first RATE AI sector comparison. The same band does not create the same management problem. It tells both leaders that the decision window deserves executive attention, then the operating context determines what must happen next.

What CCC should feel like in a boardroom

CCC is not a label for "bad AI" and it is not a finding of legal non-compliance. It is a governance signal: the organisation should no longer assume that routine monitoring and annual review are enough. At this point, the question becomes what must be strengthened, ring-fenced, redesigned or evidenced before external pressure narrows the options further.

That interpretation matters more than the internal arithmetic behind the band. A board needs to know whether it still owns the timetable and whether the system can be changed without disproportionate operational, legal or reputational cost.

Public AI is moving toward visible accountability

For public bodies, the direction of travel is increasingly explicit. The EU AI Act requires fundamental-rights impact assessment for specified high-risk public and public-service deployments, including affected groups, human oversight and mitigation. The UK's ATRS requires in-scope central-government bodies to publish standardised records and identify accountable ownership.

This pushes public AI toward a visible accountability model. The practical questions are human: who is affected, who owns the tool, how can a person challenge a decision, what happens when the system is wrong, and can the institution show that these routes work in practice?

Private AI faces a different form of complexity

Private portfolios often scale faster and through more distributed architectures: third-party models, embedded services, regional product variants, vendor contracts, internal copilots and customer-facing automation. The governance challenge is therefore less about a single public record and more about preserving a coherent line of sight across a moving portfolio.

The same CCC headline can therefore trigger different priorities. A public institution may need stronger ownership, contestability and published evidence. A private group may need portfolio census, supplier traceability, model/version linkage, cross-border classification and a stronger evidence chain from business decision to technical change.