Training course – ChatGPT – Compliance & Data Protection

ChatGPT for Compliance and Data Protection Teams

Use ChatGPT safely and productively at work: projects, custom GPTs, data analysis, Canvas and privacy settings in team workspaces.

Duration
6 hours, one session
Format
Online or on-site
Language
German or English
Participants
open dates or exclusive for your team
Certificate
Certificate of attendance

Overview

This course connects ChatGPT with the everyday processes of Compliance & Data Protection. Participants work on realistic scenarios and leave with prompts, workflows and checklists they can use straight away.

For many business teams, ChatGPT is the first AI tool they use every day – yet there is a methodical gap between asking the odd question and achieving real productivity gains. In this hands-on day you learn to apply ChatGPT deliberately to recurring work: drafting and editing text, summarising documents, analysing spreadsheets and structuring decision papers. You work with Projects that keep files and instructions together, with Canvas for reworking longer documents, and with data analysis for Excel and CSV files. Every exercise is based on genuine tasks from your own function.

The second focus is scale and responsibility. You build a custom GPT that knows your templates, tone of voice and review rules, and that colleagues across the workspace can use. We also clarify which data belongs in ChatGPT and which does not, how Team and Enterprise workspaces differ from personal accounts, and which settings matter for model training, memory and sharing. You leave with a personal prompt library, a working GPT and clear ground rules for using ChatGPT responsibly across your organisation.

Compliance and data protection teams must keep track of a growing body of rules, from the GDPR and whistleblower protection to supply chain due diligence and the EU AI Act. Generative AI can structure and accelerate this work: AI assistants summarise new regulations, produce gap analyses against existing policies, support records of processing activities and data protection impact assessments and draft clear training content. Automation helps with data subject requests, contract reviews and vendor risk assessments. At the same time, compliance teams are expected to steer AI use across the organisation: AI policies, risk classification under the AI Act and staff AI literacy obligations. Teams that use AI confidently themselves can advise the business better and design effective governance.

The course is delivered live – either online in a virtual classroom or on-site in our training rooms in Munich, Salzburg, Berlin, Augsburg, Hanover, Bremen, Stuttgart and Kaiserslautern. We can also run it exclusively for your team.

Who is this course for?

  • Compliance officers and managers
  • Data protection officers and privacy coordinators
  • Information security officers
  • Governance, risk and compliance staff
  • AI governance leads

Typical challenges we address

  • Tracking numerous new regulations and translating them into internal requirements
  • Keeping records of processing and impact assessments up to date
  • Advising business units quickly and soundly when they introduce new tools
  • Steering organisation-wide AI use in a compliant way

What you will be able to do

  • You write structured prompts that reliably produce usable results for your day-to-day tasks.
  • You organise your work in Projects and revise longer documents efficiently with Canvas.
  • You analyse spreadsheets and files with data analysis and critically verify the results.
  • You build a custom GPT for a recurring task and share it with your team.
  • Use AI for regulatory analysis, data protection documentation and contract reviews.
  • Build AI governance with a policy, a tool inventory and risk classification.
  • Advise business units soundly on GDPR and AI Act requirements for AI use.

Course outline

Module 1 Foundations and effective prompting
  • How language models work: strengths, limitations and hallucinations
  • Building effective prompts with role, context, task and output format
  • Refining iteratively instead of starting over: follow-ups and correction loops
  • Choosing models and using web search and deep research appropriately
Module 2 Projects, Canvas and document work
  • Setting up Projects to group files, instructions and chats by topic
  • Summarising, comparing and interrogating long documents
  • Using Canvas to revise text and drafts section by section
  • Templates for emails, reports, minutes and presentation outlines
Module 3 Data analysis with spreadsheets and files
  • Uploading, cleaning and analysing Excel and CSV files
  • Calculating KPIs, replicating pivot logic and explaining variances
  • Generating charts and preparing them for presentations
  • Verifying results: checking calculation steps and sanity checks
Module 4 Custom GPTs for recurring tasks
  • Identifying and scoping good use cases for GPTs
  • Configuring instructions, knowledge files and conversation starters
  • Testing, improving and sharing a GPT within the workspace
  • Maintenance, change tracking for instructions and ownership in the team
Module 5 Privacy, workspaces and governance
  • Personal accounts versus Team and Enterprise workspaces
  • Settings for model training, memory, temporary chats and sharing
  • Handling personal and confidential data in line with GDPR
  • Internal usage policy and quality assurance for AI output
Module 6 Practice lab: Compliance & Data Protection
  • Regulatory gap analysis
  • Records of processing and DPIAs
  • Reviewing data processing agreements
  • Data subject requests
  • Building AI governance
  • Training and awareness
Module 7 Data protection, quality & transfer to daily work
  • Compliance and privacy records often contain sensitive information, such as whistleblower reports that must be kept strictly confidential under whistleblower protection laws and must not be entered into unvetted AI tools. At the same time, Article 4 of the EU AI Act requires organisations to ensure sufficient AI literacy among their staff.
  • Ground rules for safe AI use in your team
  • Checking results: facts, sources, tests and the four-eyes principle
  • Personal action plan for the next 30 days
  • Open questions, outlook and resources for further learning

Practical scenarios from your field

Regulatory gap analysis

An AI assistant summarises new regulations, compares requirements with existing policies and processes and produces a structured list of gaps and actions for expert assessment.

Records of processing and DPIAs

Process descriptions and interviews are turned into draft entries for the record of processing activities and risk analyses for data protection impact assessments, reviewed by the DPO.

Reviewing data processing agreements

AI checks vendors' data processing agreements and privacy documentation for the mandatory content under Article 28 GDPR, third-country transfers and technical measures and flags deviations from the internal standard.

Data subject requests

Automations log access and erasure requests, monitor deadlines and draft responses, while data searches and final approval remain with the responsible staff.

Building AI governance

AI helps draft AI policies, build an inventory of AI systems in use and classify them according to the EU AI Act risk categories as a basis for governance board decisions.

Training and awareness

Policies are turned into clear learning modules, case studies and quizzes on data protection, anti-money laundering, anti-corruption or AI literacy, tailored to target groups across the organisation.

Prerequisites

Confident use of office applications and a web browser; no prior AI knowledge is required. Feel free to bring your own non-confidential sample tasks from your daily work. You work in compliance, data protection or information security and are familiar with the basics of the GDPR.

Technical requirements

A laptop with an up-to-date browser and a ChatGPT account; a paid plan or access to your organisation's Team or Enterprise workspace is recommended for custom GPTs, Projects and data analysis.

Data protection & compliance

Compliance and privacy records often contain sensitive information, such as whistleblower reports that must be kept strictly confidential under whistleblower protection laws and must not be entered into unvetted AI tools. At the same time, Article 4 of the EU AI Act requires organisations to ensure sufficient AI literacy among their staff.

Dates & locations

For every location we suggest a date roughly four weeks ahead. Your preferred date is always possible.

  • Munich Mon, 14 December 2026 6 hrs Request
  • Salzburg Fri, 11 December 2026 6 hrs Request
  • Berlin Fri, 11 December 2026 6 hrs Request
  • Augsburg Tue, 15 December 2026 6 hrs Request
  • Hanover Wed, 16 December 2026 6 hrs Request
  • Bremen Fri, 11 December 2026 6 hrs Request
  • Stuttgart Tue, 15 December 2026 6 hrs Request
  • Kaiserslautern Mon, 14 December 2026 6 hrs Request
  • Online Mon, 14 December 2026 6 hrs Request

Frequently asked questions

Do I need a paid ChatGPT licence for the course?

You can follow the fundamentals with a free account. However, features such as custom GPTs, Projects with larger files and advanced data analysis are tied to paid plans or come with far more generous limits there. Ideally you join with access to your organisation's Team or Enterprise workspace, so you practise under real conditions.

May I enter confidential company data into ChatGPT?

That depends on your plan, your contractual terms and your internal policy. In Team and Enterprise workspaces, content is not used for training by default, but GDPR and confidentiality obligations still apply. In the course you learn how to classify and anonymise data and how to choose the right settings.

How is a custom GPT different from a saved prompt?

A GPT bundles persistent instructions, knowledge files and optional tools such as web search or data analysis into a dedicated assistant. Colleagues can use it without any prompting skills and get consistent results. A saved prompt, by contrast, has to be copied and supplemented with context every time, which is far more error-prone.

What does the EU AI Act actually require of companies?

Since early 2025, certain AI practices have been prohibited and organisations must ensure AI literacy among staff. Further obligations cover transparency and providers and deployers of high-risk systems. In the course we classify typical use cases and work out which governance components your organisation needs.

Can data protection officers use AI themselves?

Yes, for example for contract reviews, draft documentation or training content, provided no unnecessary personal data is processed. The legal assessment remains with you. Hands-on experience with AI also improves your advice to the business, because you can judge opportunities and risks more realistically.

How much does “ChatGPT for Compliance and Data Protection Teams” cost?

The course costs a flat €949 plus VAT per participant – whether online or on-site. This includes 6 hours of live training with a trainer, course materials, a lab environment and a certificate of attendance.

Can I suggest my own date?

Yes. For every location we suggest a date roughly four weeks ahead. In the request form you can always describe your preferred date or period in free text – we check availability and get back to you within one working day.

Is the course online or on-site?

Both are possible: live online in a virtual classroom or on-site in Munich, Salzburg, Berlin, Augsburg, Hanover, Bremen, Stuttgart and Kaiserslautern. We can also run the course exclusively for your team.

Can the course be tailored to our team?

Yes. Tailor-made courses cost approx. €4,500 more, depending on the topic and by arrangement. We agree content, examples and exercises with you in advance.

More courses for Compliance and Data Protection Teams

More ChatGPT courses

All 45 ChatGPT courses

ChatGPT – MunichChatGPT – SalzburgChatGPT – BerlinChatGPT – AugsburgChatGPT – HanoverChatGPT – BremenChatGPT – StuttgartChatGPT – KaiserslauternChatGPT – Online