AI compliance training: AI Act & GDPR
Classify AI uses, document transparency and risk controls, and build a roadmap aligned with the revised 2026-2028 AI Act timetable.
Target audienceDPOs, CIOs, executives, legal professionals, compliance officers, AI project managers
What you'll be able to do
Understand the AI Act regulatory framework and its interactions with GDPR
Classify your organisation's AI systems by risk level
Document AI processing in accordance with regulatory requirements
Implement an AI risk management system
Prepare a technical and organisational compliance plan
Programme
- Day 1, morning
Understanding the regulatory landscape
- Overview: AI Act, GDPR, sectoral directives
- AI Act timeline: February 2025, August 2025, August 2026, December 2027 and August 2028
- The 4 risk levels: prohibited, high, limited, minimal
- Workshop: classify your organisation's AI uses
- Day 1, afternoon
GDPR and AI: the fundamentals
- Legal basis for AI processing, applicable principles
- Individual rights facing AI: explanation, objection, access
- DPIA: when and how to conduct one
- Workshop: map your AI processing activities
- Day 2, morning (optional)
Documenting and managing risks
- AI Act documentation: risk management, governance, transparency
- Writing an AI processing record and information notice
- Risk management system: identification, assessment, mitigation
- Risk register: template and exercise
- Day 2, afternoon (optional)
Governance and action plan
- AI governance: roles, committee, validation process
- AI Act sanctions: up to €35M or 7% of global turnover
- Compliance plan: 10 actions prioritised by timeline
- Group presentation and next steps
Practical information
1 to 2 days (7 to 14 hours)
DPOs, CIOs, executives, legal professionals, compliance officers, AI project managers
Basic GDPR knowledge. No deep technical skills required.
1 to 10 people
€1,800 to €7,000 excl. VAT per group
OPCO funding possible.
40% structured presentation, 60% workshops on real cases. Grids, templates, and regulatory texts provided. Each participant leaves with a mapping and compliance plan.
Entry assessment, assessed workshops on practical cases. At the end, a before-and-after self-assessment of skills, then the trainer validates each learning objective (acquired, in progress, not acquired), recorded in the end-of-training certificate.
Colombani.ai, AI, compliance, and security consultant.
At least 2 weeks between enrolment and the start of training.
Qualiopi-certified provider (certificate QUA009472), registered under training provider number 11757549975: OPCO or FIF-PL support can be requested. The decision rests with the funding body, based on your sector, its criteria and its budgets. Colombani.ai prepares the application with you.
Price per group, €1,800 to €7,000 excl. VAT, depending on group size and format: charged per group rather than per person. OPCO or FIF-PL funding can be requested depending on your status; the amount left to pay depends on the sum granted by the funding body.
Accessibility
This course is accessible to people with disabilities. Contact the disability officer in advance to discuss possible adjustments.
Ulysse Trin, [email protected]
Post-training support
Frequently asked questions
Is the AI Act already in force? +
Yes, in phases. Prohibitions have applied since February 2025 and transparency duties since August 2026. The AI Omnibus moved the main Annex III high-risk rules to December 2027 and product-embedded rules to August 2028.
Is my company affected by the AI Act? +
If you use or deploy AI systems in the EU, yes. The training teaches you to classify your uses and determine your exact obligations.
Do I need legal knowledge? +
Basic GDPR knowledge is enough. The training is designed for operational roles (DPOs, CIOs, executives), not just lawyers.
Related courses
AI training for executives and the leadership team: half a day to decide
Colombani.ai's AI training for executives shows in half a day what AI really changes in a business: live demonstrations, use cases by function, regulatory framework. The starting point for a leadership team.
AI agent security training
The real risks of autonomous agents: prompt injection, exfiltration via MCP, sandboxing, permissions, security hooks. AI agent red teaming.
Got a project in mind?
Describe your situation. The first 30-minute call is free. Get a frank response within 48 hours.