Governance, compliance and security
Data protection and AI course (GDPR)
Use AI with personal data while complying with the GDPR by design.
Almost any use of AI in a company touches personal data: emails, customers, employees, conversations. The GDPR still applies and the AI Act does not replace it: the two add up.
This course teaches you to apply the GDPR to AI projects by design: choosing the legal basis, minimising data, reviewing vendors and their transfers, carrying out impact assessments and handling data subject rights, including automated decisions.
What you will learn
- Apply GDPR principles to AI projects and tools
- Choose the legal basis and minimise data
- Review contracts and transfers with AI vendors
- Carry out impact assessments for AI systems
- Handle data subject rights
Syllabus
6 modules, from the fundamentals to the final project.
-
GDPR and AI
- Where personal data appears in an AI system
- How the GDPR and the AI Act relate
-
Principles
- Lawfulness, purpose limitation and minimisation
- Accuracy and storage limitation
-
Vendors
- Data processors and terms of use
- International transfers
- What to ask before signing
-
Impact assessment
- When it is mandatory
- AI-specific risks
- Coordinating with the AI Act assessment
-
Rights and automated decisions
- Information, access and erasure
- Automated decision-making (GDPR Article 22)
-
Privacy by design
- Anonymisation and pseudonymisation
- Local models and data control
- Technical and organisational measures
Tools you will practise with
- Impact assessment template
- AI vendor checklist
Hands-on project
You carry out the privacy assessment of an AI use case in your organisation, analysing the legal basis, the vendor, the risks and the measures.
Requirements
- Basic data protection knowledge recommended.
Other courses
-
AI ethics and decision-making course
A practical method for deciding when and how to use AI responsibly.
- Duration: 4–6 hours
- Level: Beginner
-
AI governance and compliance course
A practical framework for using AI in an orderly way and meeting the AI Act without stifling innovation.
- Duration: 8 hours
- Level: Intermediate
-
Generative AI security course: OWASP, risks and practical mitigations
Protect your AI applications from attacks and information leaks.
- Duration: 12 hours
- Level: Advanced
Related articles
-
Regulation
An AI usage policy for your company: what to include and how to put it in place
What a company AI usage policy should include: approved tools, permitted data, human review, transparency and training, with a step-by-step plan.
5 min read
Want this course for your team?
We adapt the content, length and format to your company.