AI Act and GDPR: Responsible Use of AI

The question is no longer whether AI can be used at work. It is with what data, with whose approval and with what record — and that has rules.

Request a Proposal

Who This Training Is For

• Executives, compliance and data protection officers
• HR and IT leaders
• Teams already using AI without a defined policy
• Organizations facing audits or client requirements

What Your Team Will Be Able to Do

• Understand what the EU AI Act requires, and from when
• Classify the organization’s AI uses by risk level
• Know what data may enter an AI tool, and under what conditions
• Write a short, clear, workable internal policy
• Prepare the organization to answer an audit or a demanding client

Programme

1. The framework — AI Act and GDPR without legalese: what changes day to day
2. Risk levels — how to classify each use and what each level demands
3. Data — what is personal data, what is trade secret, what must never leave the organization
4. Vendors and tools — what to ask before approving an AI tool
5. Internal policy — drafting a workable version together
6. Evidence — decision records, human validation and what to show in an audit

Learning Objectives

• Understand, in plain language, what the GDPR and the AI Act require when using AI tools
• Identify the risk levels of different AI uses, under the AI Act, and what that means in practice
• Recognise what kinds of data should never be shared with AI tools
• Build, or revise, an internal policy for responsible AI use
• Define roles, responsibilities and human validation processes
• Apply this to the real context and specific use cases of your own company

Format

• In person or online
• Adaptable duration: 4h or 8h
• The organization leaves with a draft of its AI policy
• Cases adapted to the sector and level of exposure

What Makes It Different

Most AI Act sessions stop at reading the regulation.

This one ends with a document: an internal policy drafted with the team, in language people understand and can follow.

Does your organization already know what data it may put into an AI assistant?

Request a tailored proposal.