Your employees completed the annual data protection e-learning. They passed the quiz. And nothing changed.
That’s because generic compliance training teaches people to tick a box, not to make better decisions. It doesn’t speak to what a marketer, an HR professional, or a product developer actually encounters in their daily work. It treats data protection as a legal abstraction rather than a practical skill.
Training that changes behaviour has to be contextual, role-specific, and engaging.
That’s what I build. Every course is designed around your company’s real-world risks, your employees’ actual roles, and the specific regulatory landscape you operate in. I deliver live — online or in person — because passive e-learning doesn’t create the engagement that drives lasting change.
How I approach it #
Contextual design. I start with your business — your sector, your data flows, your risk profile. Every course is built around scenarios and examples your employees will recognise from their own work.
Role-specific delivery. A marketer, an HR professional, and a software developer face different data protection challenges. I design targeted modules for each function rather than forcing everyone through the same generic content.
Interactive and engaging. I use visual thinking, case studies, ethical dilemmas, gamification, and hands-on exercises to make learning practical and memorable. At past events I’ve maxed out MS Teams capacity with 1,000+ participants.
Live delivery. All courses are delivered live — online or in person at your offices — by experienced practitioners who can answer questions, adapt to the room, and connect the material to your company’s reality.
Course portfolio #
I offer courses across five areas. If you need something not listed, get in touch and I will design it for you.
Data Protection & Privacy
- Preparing for an audit
- Remediation planning
- Unravelling the DPIA
- Mapping EDPB guidance
- Design Patterns v Dark Patterns
- History and origins of data protection law
- Data Subject Rights
- Anonymisation techniques
- Privacy Engineering and Privacy by Design
- Controller and processor obligations
- Joint controllership
- Transfer impact assessments
- The real value of the ROPA
- Consent fatigue
- Data Protection and Geopolitics (2026)
Marketing & Employee Data
- Privacy for Marketeers: the basics
- Privacy for Marketeers: embedding it in projects
- Telematics
- Data classification
- Employee engagement and data protection
- The broadness of personal data
- Avoiding online deception
- Individual rights compared
- Ethical dilemmas
Risk & Governance
- Data protection risk linked to enterprise risk
- Processing employee personal data
- Monitoring employees
- Cookies and trackers
- Tracking mechanisms (2026)
- Aligning data protection with ESG
- Data management for DPOs
- Quantitative risk measurement
- Rights and freedoms
- Combining and matching data
- Data transfer risks in M&A
- Quantum computing and data protection
AI Governance
- EU AI Act primer
- Ethical AI risks
- AI fundamentals
- GenAI risk guidance for employees
- Article 22 and AI Agents
- Agentic AI
- Avoiding AI deception
- AI and Data Protection: video surveillance, credit scoring, customer service chatbots, fraud detection, digital finance
International Frameworks
- APEC
- India
- Japan
- China
- Singapore
- Australia
- New Zealand
- Brazil
- Mexico
- Colombia
- Peru
- Argentina
- Chile
- Saudi Arabia
- Israel
Free learning resources #
Some of what I teach is also available as free self-paced learning on this site. No sign-up required.
- Origins, History and Evolution of European Data Protection — the regulatory timeline from the 1970s to GDPR and beyond, built for practitioners who want the context behind the rules
- Women in AI — the researchers, engineers, and advocates whose work shaped the field, and why it matters for AI governance today
- Origins and History of AI — from Turing to transformers: the ideas and decisions that produced modern AI systems
- Free infographics, explainers and one-pagers - visual explainers on GDPR, the EU AI Act, anonymisation, and more, free to download and use
These give a flavour of how I approach teaching. If your team needs something similar delivered live — tailored to your sector and context — get in touch.
Frequently Asked Questions #
How is this different from off-the-shelf e-learning? #
Off-the-shelf e-learning delivers the same generic content to every employee regardless of their role, sector, or the specific risks they face. My courses are designed around your company’s actual data flows, regulatory landscape, and business context. They are delivered live by experienced practitioners, which means employees can ask questions, discuss real scenarios, and engage with the material in ways that passive e-learning cannot achieve.
Can courses be delivered to teams in different countries and time zones? #
Yes. I regularly deliver training across EMEA, LATAM, North America, and APAC for multinational clients. Courses are delivered live online via your preferred platform, and I schedule sessions to accommodate different time zones. I can also deliver in person at your offices.
How do you measure whether the training is actually working? #
I work with you to define baseline metrics before the training programme begins, and measure impact afterwards — looking at behavioural indicators, engagement levels, and practical application rather than just quiz pass rates. I provide regular reporting so you can demonstrate the value of the programme to leadership.
Can you develop courses on topics not listed here? #
Absolutely. The course list represents my established portfolio, but every engagement starts with a conversation about your specific needs. If you need a course on a topic not listed — or want to combine elements from multiple courses into a tailored programme — I will design it for you.
