Law & Compliance in AI Security & Data Protection is a training for data protection officers (DPOs) addressing the current AI needs and skill gaps.

The EDPB launched this project in the context of the Support Pool of Experts (SPE) programme at the request of the Hellenic Data Protection Authority (HDPA).

The project was completed by external expert Dr. Marco ALMADA in December 2024.

Objective

The training provides a comprehensive foundation on legal and compliance issues in AI security and personal data protection. It offers a deeper understanding through practical case studies primarily focused on the General Data Protection Regulation (GDPR), the Artificial Intelligence Act (AI Act), the Data Act, and other relevant European regulations.

Modules:

basic concepts of AI and the issues they raise for data protection law;
risks that take place at various stages of the life cycle of an AI-based tool, from the initial decision to make use of such a technology to the end of its operation;
in-depth treatment of selected topics that are critical for organisations intending to use AI systems in accordance with the requirements of data protection law.

Further information:

This project will be soon made available into a community version. This page will be updated as soon as this new version is made available to the public.

The Board decided to publish both documents as PDF files. Taking into account the very fast evolution of AI, the EDPB also decided to launch a new innovative initiative as a one-year pilot project consisting of a modifiable community version of the reports. The EDPB will start working with the authors of both reports to import them in its Git repository** to allow, in a near future, any external contributor, with an account on this platform and under the condition of the Creative Commons Attribution-ShareAlike license, to propose changes or add comments to the documents.