Training course · Claude Code · Compliance & Data Protection

Claude Code for Compliance and Data Protection Teams

Agentic coding with Claude Code in the terminal and IDE: CLAUDE.md, subagents, hooks, MCP, CI pipelines and secure permissions.

Duration
2 days (14 hrs)
Format
Online or on-site
Language
German or English
Participants
open dates or exclusive for your team
Certificate
Certificate of attendance

Overview

“Claude Code for Compliance and Data Protection Teams” is a hands-on course for roles such as Compliance officers and managers, Data protection officers and privacy coordinators and Information security officers. Rather than learning Claude Code in the abstract, you work on tasks from your daily routine – with examples, exercises and templates from Compliance & Data Protection.

Claude Code is not only for professional developers. Business users with no programming background can use it to analyse data, clean up Excel and CSV files, generate reports or build small internal tools, all in plain language. You describe what should happen, and Claude Code writes and runs the necessary scripts itself. This course variant shows you how to put these capabilities to work in your daily job without needing to understand code, and how to check the results reliably before anyone relies on them.

You will work through realistic office scenarios: merging exports from several systems, producing analyses with charts, generating documents and mail merges automatically, or turning repetitive file chores into a single command. Working safely is a central theme: which data may be processed, how you stay in control of approvals, and when to involve your IT department. The result is a set of useful helpers that take load off your team while remaining transparent and easy to hand over.

Compliance and data protection teams must keep track of a growing body of rules, from the GDPR and whistleblower protection to supply chain due diligence and the EU AI Act. Generative AI can structure and accelerate this work: AI assistants summarise new regulations, produce gap analyses against existing policies, support records of processing activities and data protection impact assessments and draft clear training content. Automation helps with data subject requests, contract reviews and vendor risk assessments. At the same time, compliance teams are expected to steer AI use across the organisation: AI policies, risk classification under the AI Act and staff AI literacy obligations. Teams that use AI confidently themselves can advise the business better and design effective governance.

The course is delivered live – either online in a virtual classroom or on-site in our training rooms in Munich, Salzburg, Berlin, Augsburg, Hanover, Bremen, Stuttgart and Kaiserslautern. We can also run it exclusively for your team.

Who is this course for?

  • Compliance officers and managers
  • Data protection officers and privacy coordinators
  • Information security officers
  • Governance, risk and compliance staff
  • AI governance leads

Typical challenges we address

  • Tracking numerous new regulations and translating them into internal requirements
  • Keeping records of processing and impact assessments up to date
  • Advising business units quickly and soundly when they introduce new tools
  • Steering organisation-wide AI use in a compliant way

What you will be able to do

  • You commission data analyses and file tasks from Claude Code in plain language.
  • You clean and combine Excel and CSV data and check the results for plausibility.
  • You automate recurring document and reporting tasks with reusable instructions.
  • You have small internal helper tools built and refine them step by step.
  • Use AI for regulatory analysis, data protection documentation and contract reviews.
  • Build AI governance with a policy, a tool inventory and risk classification.
  • Advise business units soundly on GDPR and AI Act requirements for AI use.

Course outline

Day 1

Module 1 Getting started without coding skills
  • What a coding agent is and what it is allowed to do on your computer
  • Launching Claude Code and setting up a protected working folder
  • Describing tasks in everyday language: goal, input files, expected result
  • Understanding approval prompts and consciously accepting or declining them
Module 2 Analysing data in Excel and CSV files
  • Cleaning exports: duplicates, date formats, missing values
  • Combining several tables and calculating key figures
  • Producing charts and summaries as Excel files or images
  • Sanity-checking results with spot checks and cross-calculations
Module 3 Automating documents and routine tasks
  • Generating reports, minutes and mail merges from templates and data
  • Renaming, sorting and converting files automatically
  • Saving recurring procedures as reusable instructions
  • Writing a simple team guide in CLAUDE.md
Module 4 Building small scripts and internal tools
  • From idea to working helper: stating requirements clearly
  • Having simple input forms or local web interfaces created
  • Improving step by step: describing problems instead of debugging yourself
  • Documenting results so colleagues can use them

Day 2

Module 5 Working safely and responsibly
  • Handling personal and confidential data correctly
  • Limiting permissions and working only in approved folders
  • Recognising limits: when a tool should be handed over to IT
  • Coordinating with IT, data protection and business owners
Module 6 Hands-on project: your own solution for Compliance & Data Protection
  • AI tool inventory – An app where business units register the AI tools they use, specify purpose and data types and receive an initial risk classification under the AI Act.
  • Data subject request tracker – An internal tool that logs requests, calculates deadlines, reminds owners and documents progress in an audit-proof way.
  • Vendor check – A questionnaire tool that evaluates new vendors' data protection and security answers and compiles open points for the contract review.
Module 7 Data protection, quality & transfer to daily work
  • Compliance and privacy records often contain sensitive information, such as whistleblower reports that must be kept strictly confidential under whistleblower protection laws and must not be entered into unvetted AI tools. At the same time, Article 4 of the EU AI Act requires organisations to ensure sufficient AI literacy among their staff.
  • Ground rules for safe AI use in your team
  • Checking results: facts, sources, tests and the four-eyes principle
  • Personal action plan for the next 30 days
  • Open questions, outlook and resources for further learning

Practical scenarios from your field

Regulatory gap analysis

An AI assistant summarises new regulations, compares requirements with existing policies and processes and produces a structured list of gaps and actions for expert assessment.

Records of processing and DPIAs

Process descriptions and interviews are turned into draft entries for the record of processing activities and risk analyses for data protection impact assessments, reviewed by the DPO.

Reviewing data processing agreements

AI checks vendors' data processing agreements and privacy documentation for the mandatory content under Article 28 GDPR, third-country transfers and technical measures and flags deviations from the internal standard.

Data subject requests

Automations log access and erasure requests, monitor deadlines and draft responses, while data searches and final approval remain with the responsible staff.

Building AI governance

AI helps draft AI policies, build an inventory of AI systems in use and classify them according to the EU AI Act risk categories as a basis for governance board decisions.

Training and awareness

Policies are turned into clear learning modules, case studies and quizzes on data protection, anti-money laundering, anti-corruption or AI literacy, tailored to target groups across the organisation.

Possible hands-on projects

AI tool inventory

An app where business units register the AI tools they use, specify purpose and data types and receive an initial risk classification under the AI Act.

Data subject request tracker

An internal tool that logs requests, calculates deadlines, reminds owners and documents progress in an audit-proof way.

Vendor check

A questionnaire tool that evaluates new vendors' data protection and security answers and compiles open points for the contract review.

Prerequisites

No programming knowledge is needed; confident use of Excel, files and folders on your own computer is sufficient. You work in compliance, data protection or information security and are familiar with the basics of the GDPR.

Technical requirements

Your own laptop with admin rights, Git, a Node.js runtime and an up-to-date editor; a Claude subscription or Anthropic API access is required for the exercises.

Data protection & compliance

Compliance and privacy records often contain sensitive information, such as whistleblower reports that must be kept strictly confidential under whistleblower protection laws and must not be entered into unvetted AI tools. At the same time, Article 4 of the EU AI Act requires organisations to ensure sufficient AI literacy among their staff.

Suggested dates

All dates are suggestions – your preferred date is always possible.

  • Thu, 26 November 2026 – Fri, 27 November 2026 Online Request
  • Thu, 10 December 2026 – Fri, 11 December 2026 Berlin Request
  • Thu, 17 December 2026 – Fri, 18 December 2026 Online Request
  • Wed, 20 January 2027 – Thu, 21 January 2027 Stuttgart Request
  • Tue, 2 February 2027 – Wed, 3 February 2027 Online Request
  • Mon, 8 February 2027 – Tue, 9 February 2027 Hanover Request

Frequently asked questions

How is Claude Code different from traditional code completion?

Code completion suggests the next few lines, whereas Claude Code acts as an agent that handles whole tasks: it searches the repository, plans changes across several files, runs tests and commands, and corrects itself based on the results. You define the goal and review the outcome instead of steering every single line yourself.

Is Claude Code secure enough for enterprise use?

By default, Claude Code asks for approval before editing files or running commands. Permission rules, sandboxing, managed settings and hooks let you define precisely what the agent may do. During the course you learn to configure these mechanisms to match your security and data protection requirements and to assess risks such as prompt injection.

Does Claude Code work with my language and tech stack?

Yes. Claude Code is language-agnostic because it works with files, terminal commands and your existing build and test tooling. Whether you use Python, Java, TypeScript, Go, SAP-related code or infrastructure as code, what matters most is a well-written CLAUDE.md describing your commands and conventions. Each course variant adds the relevant domain focus.

What does the EU AI Act actually require of companies?

Since early 2025, certain AI practices have been prohibited and organisations must ensure AI literacy among staff. Further obligations cover transparency and providers and deployers of high-risk systems. In the course we classify typical use cases and work out which governance components your organisation needs.

Can data protection officers use AI themselves?

Yes, for example for contract reviews, draft documentation or training content, provided no unnecessary personal data is processed. The legal assessment remains with you. Hands-on experience with AI also improves your advice to the business, because you can judge opportunities and risks more realistically.

How much does “Claude Code for Compliance and Data Protection Teams” cost?

The course costs a flat €949 plus VAT per participant – whether online or on-site. This includes 2 training day(s) with a live trainer, course materials, a lab environment and a certificate of attendance.

Can I suggest my own date?

Yes. Our suggested dates are just a guide. In the request form you can always describe your preferred date or period in free text – we check availability and confirm within one working day.

Is the course online or on-site?

Both are possible: live online in a virtual classroom or on-site in Munich, Salzburg, Berlin, Augsburg, Hanover, Bremen, Stuttgart or Kaiserslautern. We can also run the course exclusively for your team.

More courses for Compliance and Data Protection Teams

More Claude Code courses

All 77 Claude Code courses