Skip to main content
ComplianceCourse by toolLevel All levels

AI, data and compliance: GDPR, security, EU AI Act

Use AI without putting company or customer data at risk: concrete security rules, a usage policy, and the AI literacy training the EU AI Act expects from employers.

Programme updated on 6 November 2026. Our courses are delivered in French. If you need another language, contact us: we will tell you honestly what is possible.

Learning objectives

By the end of the course, participants are able to

  • Identify the real risks of generative AI: data leaks, errors, copyright, unmanaged use
  • Apply GDPR rules to AI use: personal data, legal bases, information, processors, transfers outside the EU
  • Configure the tools (history, training, business editions) and decide which data can be shared
  • Place the EU AI Act's obligations for a company using AI, including the AI literacy duty (Article 4)
  • Write an AI usage policy suited to the company

Programme

How the course is structured

Half day (3.5 hours). Timings are adjusted to the group's level and your priorities.

  1. 01The real risks, with examples

    45 min
    • Data leaks and trade secrets
    • Confident errors and verification
    • Undeclared use within teams
  2. 02GDPR and AI

    1 hr
    • Guidance from data protection regulators (CNIL, ICO, EDPB)
    • Customer, employee and candidate data: what is allowed
    • Choosing a tool: contract, hosting, processors
  3. 03Settings and good reflexes

    45 min
    • History, training, sharing: the settings to know
    • Free versions vs business editions
    • Anonymise before you ask
  4. 04EU AI Act: what applies to an SME

    45 min
    • Timeline and risk categories
    • AI literacy duty (Article 4) and transparency
    • Sensitive uses: recruitment, appraisal, decision-making
  5. 05Usage policy workshop

    15 min
    • Policy template adapted to your company
    • Who decides, who checks, how to train

Details

Audience, prerequisites, methods and assessment

Who it is for

  • Business owners, managers, data protection or IT leads
  • Any employee who uses AI (AI awareness training version)

Prerequisites

  • None

Teaching methods

  • Short explanations alternating with hands-on AI workshops on the participants' real cases.
  • Each participant works on their own computer, with the company's tools or trial accounts we provide.
  • Materials handed over at the end of the session: practical guides, prompt library, reusable templates.
  • Groups of 4 to 10 participants (8 recommended) to keep individual support possible.

Assessment and follow-up

  • Self-assessment questionnaire before or at the start of the session.
  • Hands-on exercises assessed during the course (trainer's observation grid).
  • End-of-course quiz and immediate satisfaction survey.
  • Certificate of completion issued to each participant.

Our courses are open to people with disabilities: contact us beforehand so we can adapt the pace, materials, tools or venue. All practical information

Funding this course

For companies established in France, this course falls under the company's skills development plan: depending on your OPCO, your headcount and the programme, the course fee may be covered in full or in part, sometimes with nothing left to pay. Funding is never automatic; it is checked case by case before the training and confirmed in writing by the OPCO. We prepare the file with you (detailed programme, quote, agreement). Companies outside France can take the course online and fund it from their own budget or through their national schemes, which we help you identify without promising anything.

OPCO funding applies only to companies established in France; it depends on the company's and the programme's eligibility and is checked case by case before any booking. Companies elsewhere fund the training from their own budget or through their national schemes. Boost Activity does not currently hold Qualiopi certification (the French quality standard for training providers).

Frequently asked questions

Before you book

Where and how is the 'Security, GDPR and AI Act' course delivered?

In-house, at your premises ; Online, live virtual classroom ; Open sessions, mixed companies. Duration: Half day (3.5 hours), in groups of 4 to 10 participants. Dates are agreed with you and the programme is adapted to your tools and your real cases. Sessions are delivered in French; contact us for other languages.

What are the prerequisites and what equipment is needed?

None. Each participant works on their own computer, with the company's tools or trial accounts we provide.

How much does this course cost and can it be funded?

In-house course: quoted on request, based on group size, duration and location, excluding VAT, plus any travel costs. In France, OPCO funding depends on your company's and the programme's eligibility and is checked case by case before booking; Boost Activity does not currently hold Qualiopi certification. Outside France, the course is self-funded or funded through your national schemes.

What do participants receive at the end?

A certificate of completion (non-accredited course), the course materials and practical guides (prompt library, templates), and a personal action plan of three uses to put in place the following week.

All frequently asked questions

Going further

Related courses

  • General-purpose AI assistants

    ChatGPT, Claude and Gemini

    Understand how AI assistants work, choose the right tool and use it for everyday tasks, with a method and without risk to your data.

    1 day (7 hours) · Beginner · At your premises, Online (live), Open sessions

    View the programme
  • Leadership

    Business owners and leaders

    A half-day AI awareness session for business leaders: understand what AI changes for your company, spot the profitable uses, decide what to deploy, with what framework and what budget.

    Half day (3.5 hours) · All levels · At your premises, Online (live), Open sessions

    View the programme
  • Human resources

    HR and recruitment

    Job descriptions, applications, interviews, onboarding, internal communication: useful uses, with the essential legal guardrails.

    1 day (7 hours) · All levels · At your premises, Online (live)

    View the programme

Train your team: Security, GDPR and AI Act

Tell us your tools, the number of participants and your availability. We come back to you with an adjusted programme, a quote and the funding options worth checking.