Training course – EU AI Act & AI Compliance – Compliance & Data Protection

EU AI Act & AI Compliance for Compliance and Data Protection Teams

Putting the EU AI Act into practice: risk categories, deployer obligations, AI literacy under Art. 4, AI policy and GDPR interfaces.

Duration
6 hours, one session
Format
Online or on-site
Language
German or English
Participants
open dates or exclusive for your team
Certificate
Certificate of attendance

Overview

This course connects EU AI Act & AI Compliance with the everyday processes of Compliance & Data Protection. Participants work on realistic scenarios and leave with prompts, workflows and checklists they can use straight away.

The EU AI Act is the first comprehensive legal framework for artificial intelligence, and it applies not only to providers but also to organisations that use AI systems in their daily work. In this compact course you will learn how the regulation is structured: prohibited practices, high-risk systems, transparency obligations and general-purpose AI models. You will find out which role your organisation plays as a deployer, which obligations follow and how to record and classify the AI applications you use in a structured way.

The practical part turns the requirements into manageable steps. You clarify what the AI literacy obligation under Article 4 means in concrete terms, how to organise training in a verifiable way and what an internal AI policy should cover. You also examine the interfaces with the GDPR, such as legal bases, data protection impact assessments and automated decision-making. You leave with an AI inventory template, a draft policy and a clear compliance roadmap for your area of work.

Compliance and data protection teams must keep track of a growing body of rules, from the GDPR and whistleblower protection to supply chain due diligence and the EU AI Act. Generative AI can structure and accelerate this work: AI assistants summarise new regulations, produce gap analyses against existing policies, support records of processing activities and data protection impact assessments and draft clear training content. Automation helps with data subject requests, contract reviews and vendor risk assessments. At the same time, compliance teams are expected to steer AI use across the organisation: AI policies, risk classification under the AI Act and staff AI literacy obligations. Teams that use AI confidently themselves can advise the business better and design effective governance.

The course is delivered live – either online in a virtual classroom or on-site in our training rooms in Munich, Salzburg, Berlin, Augsburg, Hanover, Bremen, Stuttgart and Kaiserslautern. We can also run it exclusively for your team.

Who is this course for?

  • Compliance officers and managers
  • Data protection officers and privacy coordinators
  • Information security officers
  • Governance, risk and compliance staff
  • AI governance leads

Typical challenges we address

  • Tracking numerous new regulations and translating them into internal requirements
  • Keeping records of processing and impact assessments up to date
  • Advising business units quickly and soundly when they introduce new tools
  • Steering organisation-wide AI use in a compliant way

What you will be able to do

  • You can explain how the EU AI Act is structured and assign your organisation to the correct roles.
  • You can classify the AI applications in use by risk category and maintain an AI inventory.
  • You can name the specific obligations of deployers and derive appropriate measures.
  • You can develop an AI literacy concept under Article 4 and a draft internal AI policy.
  • Use AI for regulatory analysis, data protection documentation and contract reviews.
  • Build AI governance with a policy, a tool inventory and risk classification.
  • Advise business units soundly on GDPR and AI Act requirements for AI use.

Course outline

Module 1 Structure and logic of the EU AI Act
  • Objectives, scope and phased application of the regulation
  • Roles at a glance: provider, deployer, importer and distributor
  • The risk-based approach: prohibited practices, high risk, limited risk and minimal risk
  • Specific rules for general-purpose AI models
Module 2 Classifying risk in practice
  • Prohibited practices such as social scoring or emotion recognition in the workplace
  • High-risk areas under Annex III, including recruitment, creditworthiness and education
  • Transparency obligations for chatbots, synthetic content and deepfakes
  • Recording and classifying your own AI applications in an AI inventory
Module 3 Obligations for deployers of AI systems
  • Use in line with instructions and human oversight by competent staff
  • Input data quality, monitoring of operation and retention of logs
  • Informing employees and affected persons and reporting serious incidents
  • Fundamental rights impact assessment: when it is required and how it works
Module 4 AI literacy under Art. 4 and internal AI policy
  • What sufficient AI literacy means for different roles
  • Designing training concepts and documenting measures verifiably
  • Components of an AI policy: approved tools, data classes, approvals and labelling
  • Responsibilities, AI officers and involving the works council and IT
Module 5 GDPR interfaces and governance
  • Legal bases, purpose limitation and data minimisation when using AI
  • Data protection impact assessment and its relationship to the fundamental rights assessment
  • Automated individual decisions, data subject rights and data processing agreements
  • Compliance roadmap: priorities, ownership and regular review
Module 6 Practice lab: Compliance & Data Protection
  • Regulatory gap analysis
  • Records of processing and DPIAs
  • Reviewing data processing agreements
  • Data subject requests
  • Building AI governance
  • Training and awareness
Module 7 Data protection, quality & transfer to daily work
  • Compliance and privacy records often contain sensitive information, such as whistleblower reports that must be kept strictly confidential under whistleblower protection laws and must not be entered into unvetted AI tools. At the same time, Article 4 of the EU AI Act requires organisations to ensure sufficient AI literacy among their staff.
  • Ground rules for safe AI use in your team
  • Checking results: facts, sources, tests and the four-eyes principle
  • Personal action plan for the next 30 days
  • Open questions, outlook and resources for further learning

Practical scenarios from your field

Regulatory gap analysis

An AI assistant summarises new regulations, compares requirements with existing policies and processes and produces a structured list of gaps and actions for expert assessment.

Records of processing and DPIAs

Process descriptions and interviews are turned into draft entries for the record of processing activities and risk analyses for data protection impact assessments, reviewed by the DPO.

Reviewing data processing agreements

AI checks vendors' data processing agreements and privacy documentation for the mandatory content under Article 28 GDPR, third-country transfers and technical measures and flags deviations from the internal standard.

Data subject requests

Automations log access and erasure requests, monitor deadlines and draft responses, while data searches and final approval remain with the responsible staff.

Building AI governance

AI helps draft AI policies, build an inventory of AI systems in use and classify them according to the EU AI Act risk categories as a basis for governance board decisions.

Training and awareness

Policies are turned into clear learning modules, case studies and quizzes on data protection, anti-money laundering, anti-corruption or AI literacy, tailored to target groups across the organisation.

Prerequisites

No legal background is required. A basic knowledge of the GDPR and an overview of the AI applications used or planned in your area are helpful. You work in compliance, data protection or information security and are familiar with the basics of the GDPR.

Technical requirements

All you need is a laptop with an up-to-date browser and an office suite for working with templates. No special AI licences are necessary.

Data protection & compliance

Compliance and privacy records often contain sensitive information, such as whistleblower reports that must be kept strictly confidential under whistleblower protection laws and must not be entered into unvetted AI tools. At the same time, Article 4 of the EU AI Act requires organisations to ensure sufficient AI literacy among their staff.

Dates & locations

For every location we suggest a date roughly four weeks ahead. Your preferred date is always possible.

  • Munich Mon, 14 December 2026 6 hrs Request
  • Salzburg Thu, 10 December 2026 6 hrs Request
  • Berlin Wed, 16 December 2026 6 hrs Request
  • Augsburg Mon, 14 December 2026 6 hrs Request
  • Hanover Thu, 10 December 2026 6 hrs Request
  • Bremen Mon, 14 December 2026 6 hrs Request
  • Stuttgart Fri, 11 December 2026 6 hrs Request
  • Kaiserslautern Thu, 10 December 2026 6 hrs Request
  • Online Tue, 15 December 2026 6 hrs Request

Frequently asked questions

Does the EU AI Act apply to companies that only use AI tools?

Yes. Anyone using AI systems under their own authority in a professional context is a deployer. All deployers must, in particular, ensure that their staff have sufficient AI literacy. Where high-risk systems are used, for example in recruitment, further obligations apply, such as human oversight, logging and informing the people affected.

Does this course satisfy the training obligation under Article 4?

The course covers core AI literacy content and you receive a certificate of attendance that you can add to your documentation. However, Article 4 requires measures tailored to role, prior knowledge and context of use. That is why you also learn how to set up and maintain your own AI literacy concept for your organisation.

Does the course replace legal advice?

No. The training provides practical knowledge for specialists and managers so they can interpret requirements, ask precise questions and implement first measures. For binding assessments of individual systems, especially in high-risk areas, you should involve your legal department, your data protection officer or external specialist lawyers.

What does the EU AI Act actually require of companies?

Since early 2025, certain AI practices have been prohibited and organisations must ensure AI literacy among staff. Further obligations cover transparency and providers and deployers of high-risk systems. In the course we classify typical use cases and work out which governance components your organisation needs.

Can data protection officers use AI themselves?

Yes, for example for contract reviews, draft documentation or training content, provided no unnecessary personal data is processed. The legal assessment remains with you. Hands-on experience with AI also improves your advice to the business, because you can judge opportunities and risks more realistically.

How much does “EU AI Act & AI Compliance for Compliance and Data Protection Teams” cost?

The course costs a flat €949 plus VAT per participant – whether online or on-site. This includes 6 hours of live training with a trainer, course materials, a lab environment and a certificate of attendance.

Can I suggest my own date?

Yes. For every location we suggest a date roughly four weeks ahead. In the request form you can always describe your preferred date or period in free text – we check availability and get back to you within one working day.

Is the course online or on-site?

Both are possible: live online in a virtual classroom or on-site in Munich, Salzburg, Berlin, Augsburg, Hanover, Bremen, Stuttgart and Kaiserslautern. We can also run the course exclusively for your team.

Can the course be tailored to our team?

Yes. Tailor-made courses cost approx. €4,500 more, depending on the topic and by arrangement. We agree content, examples and exercises with you in advance.

More courses for Compliance and Data Protection Teams

More EU AI Act & AI Compliance courses

All 45 EU AI Act & AI Compliance courses

EU AI Act & AI Compliance – MunichEU AI Act & AI Compliance – SalzburgEU AI Act & AI Compliance – BerlinEU AI Act & AI Compliance – AugsburgEU AI Act & AI Compliance – HanoverEU AI Act & AI Compliance – BremenEU AI Act & AI Compliance – StuttgartEU AI Act & AI Compliance – KaiserslauternEU AI Act & AI Compliance – Online