Skip to content

Twice as many consumers grant AI access reluctantly as willingly. Call it resigned consent.

With reluctant permission outnumbering genuine permission two to one, the access rates brands are building their marketing campaigns on are a faulty proxy to whether that access is built on trust or on resignation.

The big picture

Close to six in ten consumers say they would let an AI assistant access their data: their work tools, their health data, their company account information. On paper, that looks like a win. Consumers are on board and adoption is coming.

New data from Usercentrics’ State of Digital Trust 2026, based on 11,000 consumers across seven markets, says that’s only half right.

An average of 58% of consumers report some level of discomfort with AI accessing their data across six categories, ranging from 53% for work tools to 64% for financial accounts. Only 7% are fully comfortable granting access with no conditions attached, and 16% will tell you they’re granting that access despite feeling uncomfortable about it.

This is called resigned consent. The person said yes because they’d already decided no wasn’t a real option. It outnumbers willing access two to one across every category and every generation surveyed. The only thing that changes that picture is country, a difference we will explore in this report.

A consent rate tells you people said yes. It doesn’t tell you which yes you got. Genuine consent shows up as loyalty and retention. Resigned consent shows up as churn and complaints, without anyone tracing either one back to the original opt-in. Distinguishing between the two happens later, in usage data, renewal conversations, and the permissions people choose to turn off.

Closing the gap means treating an access rate as the start of the work rather than proof it’s done. Access isn’t the finish line, it’s the opening move in a relationship, and what a brand does with that access afterward is what turns a resigned yes into a genuine one.

Germany says yes more reluctantly than any other country surveyed

At 24% on average, Germany’s rate of resigned consent is more than double the UK’s or the US’s rate. The average is not being dragged up by one particular category, it holds between 23% and 24% in all six categories. Germany is also the market least likely to say no outright, with 16% flat refusal against a 23% global average, the lowest refusal rate in every category tested. 

Germany is the market most ready to say yes, and that yes is the most reluctant of any market in the study.

The UK and the US sit at the other end. Their rates of resigned consent are the lowest in the study, at 11% to 10% against Germany’s 24%, so when consumers in those markets say yes, they’re more likely to mean it. A lower access rate in those markets isn’t a weaker result, it’s a clearer one.

The State of Digital Trust 2026 helps explain the gap in detail: German consumers rank trust in the regulatory framework above brand transparency as their reason for granting access, the opposite of every other market studied. That’s plausibly why comfort there runs high but genuine enthusiasm doesn’t: people are relying on the rules to catch problems, not on the request itself feeling right.

24%
16%
19%
25%
19%
21%
14%
31%
14%
29%
10%
25%
11%
24%
16%
23%
0 5 10 15 20 25 30 35
Resigned consent
Flat refusal
Take action — Compliance gets you the yes. It won’t get you a genuine one

Meeting GDPR, CCPA, CIPA and 20+ other frameworks is table stakes, and it’s what gets a request through the door everywhere you operate. But Germany’s numbers show that trusting the rules and trusting the request aren’t the same thing, even where the law is doing real work. Usercentrics CMP handles the compliance layer so you’re covered wherever you operate, website or app and gives you the tools, plain-language consent flows, granular choice and on-brand design, to turn that legally-secured yes into one people actually meant.

From insight to action

Two people granted an AI assistant access to their inbox this morning. One weighed the trade and decided it was worth it. The other decided refusing was more trouble than allowing it. Your access rate recorded them as the same.

There’s no single fix for that. How people resolve their discomfort varies by market and by age. German consumers grant access reluctantly. British and American consumers grant it less reluctantly, but access they grant is more considered. Swedish and Dutch consumers are more likely to simply leave than resign themselves to giving data access.

The goal isn’t a higher yes rate. It’s a more honest one.

Turning a resigned yes into a real one

Most consent advice is written to raise your opt-in rate. That’s the wrong goal – a higher rate is exactly what resigned consent already gives you. These checks are aimed at something narrower: making sure the yes you get is one people meant.

Consent experiences built this way are likely to generate lower opt-in rates than the one you have today. That’s the point. The yeses that remain are far more likely to hold up when something goes wrong.

Getting there isn’t a one-time fix, it’s worth building alongside people who’ve done it before.

Talk to a Usercentrics specialist about closing the resigned-consent gap in your own AI rollout.

Explore case studies from organizations turning privacy infrastructure into measurable performance.

The brands consumers will grant AI access to in 2027 are deciding how they ask right now.

Take action — Build the permission layer before you need it

MCP Manager by Usercentrics governs what your own AI agents can access, so when you connect them to company systems and customer data, you’re not finding out where the resistance was after deployment, you’re the one deciding what they can reach in the first place.

11,000 consumers. 7 markets. Conducted by Sapio Research in March 2026. Accurate to ±0.9% at 95% confidence. Sweden is a new market this year; YoY comparisons exclude Sweden.

The State of Digital Trust Report is provided for general informational and research purposes only and does not constitute legal, compliance, regulatory, or professional advice of any kind. Any views, projections, or statements contained herein reflect opinion based on consumer research as of the date of publication and are not promises or guarantees of any commercial, regulatory, or other outcome. Readers should not rely on this report as a substitute for independent professional judgment. To the fullest extent permitted by applicable law, Usercentrics disclaims all liability for any loss, damage, or harm arising directly or indirectly from any action taken or omitted in reliance on the contents of this report.