Your employees completed the annual data protection e-learning. They passed the quiz. And nothing changed.

That’s because generic compliance training teaches people to tick a box, not to make better decisions. It doesn’t speak to what a marketer, an HR professional, or a product developer actually encounters in their daily work. It treats data protection as a legal abstraction rather than a practical skill.

Training that changes behaviour has to be contextual, role-specific, and engaging.

That’s what we build. Every course is designed around your organisation’s real-world risks, your employees’ actual roles, and the specific regulatory landscape you operate in. We deliver live — online or in person — because passive e-learning doesn’t create the engagement that drives lasting change.

How we approach it #

• Contextual design. We start with your business — your sector, your data flows, your risk profile. Every course is built around scenarios and examples your employees will recognise from their own work.

• Role-specific delivery. A marketer, an HR professional, and a software developer face different data protection challenges. We design targeted modules for each function rather than forcing everyone through the same generic content.

• Interactive and engaging. We use visual thinking, case studies, ethical dilemmas, gamification, and hands-on exercises to make learning practical and memorable. At past events we’ve maxed out MS Teams capacity with 1,000+ participants.

• Live delivery. All courses are delivered live — online or in person at your offices — by experienced practitioners who can answer questions, adapt to the room, and connect the material to your organisation’s reality.

Course portfolio #

We offer a wide range of courses across the following areas. Book a call to discuss your specific training needs.

Data Protection & Privacy #

• Preparing for a data protection audit
• How to make a remediation plan after an audit or assessment
• Unravelling the abstract elements of the DPIA
• Mapping key EDPB/Art.29 WP guidance against elements of your privacy program
• Design Patterns v Dark Patterns
• History and origins of Data Protection & Privacy Laws
• Data subjects – the importance of value sensitivity
• Anonymization techniques
• Technology considerations in the privacy program
• Modelling privacy threats and violations
• Countermeasures
• Privacy Engineering basics
• Privacy by Design principles
• Privacy concerns resulting from emerging technologies
• Data protection principles and concepts
• The importance of a purpose-driven data protection strategy aligned with the business strategy
• Unpacking a Privacy Program: why it’s important, what it consists of, and how the elements fit together
• Technology and privacy
• Data protection in Europe (GDPR primer)
• Establishing a privacy program step-by-step
• Joint controllership
• Transfer impact assessments
• The real value of the ROPA
• Data controller and data processor obligations

Marketing & Employee Data #

• Privacy for Marketeers: Data about people – let’s start with the basics
• Privacy for Marketeers: Embedding privacy considerations into your projects
• Telematics – benefits and privacy concerns
• The importance of data classification
• Elevating data protection across the organisation through strong employee engagement
• Data about People – the broadness of personal data
• Avoid online deception
• Comparing and contrasting individual rights
• Ethical dilemmas – a quiz

Risk & Governance #

• Data protection and privacy risk – linking to enterprise risk
• Processing of employee personal data – basic considerations
• Monitoring of employees – trends, risks and cases
• Cookies and trackers – what’s changing?
• Aligning data protection with ESG
• Data management for DPOs
• Quantitative risk measurement
• What do we mean by ‘rights and freedoms’?
• The challenges of combining and matching data
• Data protection risk – cause and effects (linking to ERM)

AI Governance #

• EU AI Act – a primer
• Understanding ethical AI risks
• AI fundamentals – with a case
• AI fundamentals – a primer
• GenAI risk guidance: for employees

International Frameworks #

• APEC framework overview
• India overview
• Japan overview
• China overview
• Singapore overview
• Australia overview
• New Zealand overview
• Brazil framework
• Mexico overview
• Columbia overview
• Peru overview
• Argentina overview
• Chile overview
• Saudi Arabia overview
• Israel overview

Frequently Asked Questions #

How is this different from off-the-shelf e-learning? #

Off-the-shelf e-learning delivers the same generic content to every employee regardless of their role, sector, or the specific risks they face. Our courses are designed around your organisation’s actual data flows, regulatory landscape, and business context. They are delivered live by experienced practitioners, which means employees can ask questions, discuss real scenarios, and engage with the material in ways that passive e-learning cannot achieve.

Can courses be delivered to teams in different countries and time zones? #

Yes. We regularly deliver training across EMEA, LATAM, North America, and APAC for multinational clients. Courses are delivered live online via your preferred platform, and we schedule sessions to accommodate different time zones. We can also deliver in person at your offices.

How do you measure whether the training is actually working? #

We work with you to define baseline metrics before the training programme begins, and measure impact afterwards — looking at behavioural indicators, engagement levels, and practical application rather than just quiz pass rates. We provide regular reporting so you can demonstrate the value of the programme to leadership.

Can you develop courses on topics not listed here? #

Absolutely. The course list represents our established portfolio, but every engagement starts with a conversation about your specific needs. If you need a course on a topic not listed — or want to combine elements from multiple courses into a tailored programme — we will design it for you.