Gartner Predicts 40% of Government Organisations Will Establish TrustOps to Counter Deepfake Threats by 2028

19 May 2026 - Forty percent of government organisations will establish dedicated TrustOps functions by 2028 to combat deepfake identity impersonation and disinformation-as-a-service (DaaS), according to Gartner, Inc., a business and technology insights company. 

These threats manifest as public-facing disinformation campaigns, such as impersonating leaders to issue misleading public statements and in attacks on internal systems. The latter aims to compromise automated biometric authentication (voice or face) or use social engineering to manipulate employees into harmful actions, typically by rapidly establishing authority and urgency. 

"Deepfakes can undermine or even weaponise notions of digital identity, attacking the credibility of the State itself," said Daniel Nieto, Sr. Director Analyst at Gartner. "If citizens cannot distinguish a legitimate prime minister's announcement or a secure tax agency portal from a replica, the foundational architecture of truth collapses."

Government organisations must urgently establish trust capabilities, such as transitioning from reactive fact checking to a proactive trust architecture, to defend against deepfakes. The implications of deepfakes at scale, resulting from the marriage of social media and synthetic content demand an orchestrated, rapid enterprise-wide defense.

"The deepfake phenomenon threatens to induce digital regression; reversing the ROI of digital transformation by forcing a retreat to high-friction, paper and in-person interactions," said Nieto. 

Preparing Government Organisations for Disinformation
Government organisations should not treat deepfakes solely as an IT problem. It is a cross-functional crisis requiring executive orchestration and a prolonged continuous education of the workforce and public. There is no single owner in a traditional organisational structure. 

Government organisations must also avoid relying on reactive takedowns. They cannot outrun a deepfake once it is viral. Organisations must saturate the information space with the truth first. 

Finally, they should not over rely on citizen awareness. While education is necessary, the burden of verification must shift away from the end user to the institutional architecture through cryptographic provenance.

To accomplish these goals, government organisations should prioritise the following in the near-term:

• Establish a trust council: Orchestrate an oversight role in consultation with primary stakeholders (IT, legal, communications, HR). This capability must manage digital identity issues and manage inward/outward disinformation activity.
• Harden business processes: Identify and then audit high-risk administrative workflows, such as financial disbursements. Implement security measures that require multiple approvers and application-level authentication to eliminate single-point-of-failure vulnerabilities exploitable by voice-cloned executives. Then adopt formal data and security governance strategies and programs that first focus on these high-risk workflows and subsequently expand to others as necessary.
• Develop deepfake verification procedures: Design standard operating procedures (SOPs) that use step-by-step guides to use technology to test suspicious digital interactions and expose content that may have been synthetically created by AI.

"Long-term, government organisations can consider implementing solutions such as the C2PA protocol," said Nieto. "They should mandate outbound content grounding by adopting the C2PA protocol, embedding tamper-proof cryptographic metadata into all official digital media. They can also market the use of content provenance to constituents and stakeholders to assert trust."

Gartner clients can read more in Strategies for Government CIOs to Defend Digital Trust Against Deepfakes.

Additional information on AI in government can be found in the complimentary Gartner webinar Government AI at the Tipping Point: Moving Rapidly from Pilots to Essential Mission Delivery.

About Gartner for Government and Public Sector 
Gartner for Government and Public Sector equips IT leaders and their teams with actionable, objective insights and tools to make faster, smarter decisions and achieve stronger performance on mission-critical priorities. Additional information is available at https://www.gartner.com/en/industries/government-public-sector/all. 

Follow news and updates from Gartner for Government and Public Sector on X and LinkedIn. Visit the Gartner Newsroom for more information and insights.

About Gartner
Gartner (NYSE: IT) delivers actionable, objective business and technology insights that drive smarter decisions and stronger performance for an organisation's mission-critical priorities. To learn more visit gartner.com.