↓Skip to main content
Bespoke Education and Training
Bespoke Education and Training

Generic data protection e-learning doesn't change behaviour. I design and deliver training that is tailored to your teams, your sector, and your real-world risks.

Your employees completed the annual data protection e-learning. They passed the quiz. And nothing changed.

That’s because generic compliance training teaches people to tick a box, not to make better decisions. It doesn’t speak to what a marketer, an HR professional, or a product developer actually encounters in their daily work. It treats data protection as a legal abstraction rather than a practical skill.

Training that changes behaviour has to be contextual, role-specific, and engaging.

That’s what I build. Every course is designed around your company’s real-world risks, your employees’ actual roles, and the specific regulatory landscape you operate in. I deliver live — online or in person — because passive e-learning doesn’t create the engagement that drives lasting change.

How I approach it #

  • Contextual design. I start with your business — your sector, your data flows, your risk profile. Every course is built around scenarios and examples your employees will recognise from their own work.

  • Role-specific delivery. A marketer, an HR professional, and a software developer face different data protection challenges. I design targeted modules for each function rather than forcing everyone through the same generic content.

  • Interactive and engaging. I use visual thinking, case studies, ethical dilemmas, gamification, and hands-on exercises to make learning practical and memorable. At past events I’ve maxed out MS Teams capacity with 1,000+ participants.

  • Live delivery. All courses are delivered live — online or in person at your offices — by experienced practitioners who can answer questions, adapt to the room, and connect the material to your company’s reality.

Course portfolio #

I offer courses across five areas. If you need something not listed, get in touch and I will design it for you.

Data Protection & Privacy

  • Preparing for an audit
  • Remediation planning
  • Unravelling the DPIA
  • Mapping EDPB guidance
  • Design Patterns v Dark Patterns
  • History and origins of data protection law
  • Data Subject Rights
  • Anonymisation techniques
  • Privacy Engineering and Privacy by Design
  • Controller and processor obligations
  • Joint controllership
  • Transfer impact assessments
  • The real value of the ROPA
  • Consent fatigue
  • Data Protection and Geopolitics (2026)

Marketing & Employee Data

  • Privacy for Marketeers: the basics
  • Privacy for Marketeers: embedding it in projects
  • Telematics
  • Data classification
  • Employee engagement and data protection
  • The broadness of personal data
  • Avoiding online deception
  • Individual rights compared
  • Ethical dilemmas

Risk & Governance

  • Data protection risk linked to enterprise risk
  • Processing employee personal data
  • Monitoring employees
  • Cookies and trackers
  • Tracking mechanisms (2026)
  • Aligning data protection with ESG
  • Data management for DPOs
  • Quantitative risk measurement
  • Rights and freedoms
  • Combining and matching data
  • Data transfer risks in M&A
  • Quantum computing and data protection

AI Governance

  • EU AI Act primer
  • Ethical AI risks
  • AI fundamentals
  • GenAI risk guidance for employees
  • Article 22 and AI Agents
  • Agentic AI
  • Avoiding AI deception
  • AI and Data Protection: video surveillance, credit scoring, customer service chatbots, fraud detection, digital finance

International Frameworks

  • APEC
  • India
  • Japan
  • China
  • Singapore
  • Australia
  • New Zealand
  • Brazil
  • Mexico
  • Colombia
  • Peru
  • Argentina
  • Chile
  • Saudi Arabia
  • Israel
Delivered as standalone sessions or as part of a broader programme.

Free learning resources #

Some of what I teach is also available as free self-paced learning on this site. No sign-up required.

These give a flavour of how I approach teaching. If your team needs something similar delivered live — tailored to your sector and context — get in touch.


Frequently Asked Questions #

How is this different from off-the-shelf e-learning? #

Off-the-shelf e-learning delivers the same generic content to every employee regardless of their role, sector, or the specific risks they face. My courses are designed around your company’s actual data flows, regulatory landscape, and business context. They are delivered live by experienced practitioners, which means employees can ask questions, discuss real scenarios, and engage with the material in ways that passive e-learning cannot achieve.

Can courses be delivered to teams in different countries and time zones? #

Yes. I regularly deliver training across EMEA, LATAM, North America, and APAC for multinational clients. Courses are delivered live online via your preferred platform, and I schedule sessions to accommodate different time zones. I can also deliver in person at your offices.

How do you measure whether the training is actually working? #

I work with you to define baseline metrics before the training programme begins, and measure impact afterwards — looking at behavioural indicators, engagement levels, and practical application rather than just quiz pass rates. I provide regular reporting so you can demonstrate the value of the programme to leadership.

Can you develop courses on topics not listed here? #

Absolutely. The course list represents my established portfolio, but every engagement starts with a conversation about your specific needs. If you need a course on a topic not listed — or want to combine elements from multiple courses into a tailored programme — I will design it for you.