AI compliance training: AI Act & GDPR
Classify AI uses, document transparency and risk controls, and build a roadmap aligned with the revised 2026-2028 AI Act timetable.
Target audienceDPOs, CIOs, executives, legal professionals, compliance officers, AI project managers
What you'll be able to do
Understand the AI Act regulatory framework and its interactions with GDPR
Classify your organisation's AI systems by risk level
Document AI processing in accordance with regulatory requirements
Implement an AI risk management system
Prepare a technical and organisational compliance plan
Programme
- Day 1, morning
Understanding the regulatory landscape
- Overview: AI Act, GDPR, sectoral directives
- AI Act timeline: February 2025, August 2025, August 2026, December 2027 and August 2028
- The 4 risk levels: prohibited, high, limited, minimal
- Workshop: classify your organisation's AI uses
- Day 1, afternoon
GDPR and AI: the fundamentals
- Legal basis for AI processing, applicable principles
- Individual rights facing AI: explanation, objection, access
- DPIA: when and how to conduct one
- Workshop: map your AI processing activities
- Day 2, morning (optional)
Documenting and managing risks
- AI Act documentation: risk management, governance, transparency
- Writing an AI processing record and information notice
- Risk management system: identification, assessment, mitigation
- Risk register: template and exercise
- Day 2, afternoon (optional)
Governance and action plan
- AI governance: roles, committee, validation process
- AI Act sanctions: up to €35M or 7% of global turnover
- Compliance plan: 10 actions prioritised by timeline
- Group presentation and next steps
Practical information
1 to 2 days (7 to 14 hours)
DPOs, CIOs, executives, legal professionals, compliance officers, AI project managers
Basic GDPR knowledge. No deep technical skills required.
1 to 8 people
40% structured presentation, 60% workshops on real cases. Grids, templates, and regulatory texts provided. Each participant leaves with a mapping and compliance plan.
Entry-level assessment, practical case workshops, end-of-training knowledge evaluation.
Colombani.ai, AI, compliance, and security consultant.
At least 2 weeks between enrolment and the start of training.
Qualiopi-certified provider (training provider registration number 11757549975): OPCO or FIF-PL support can be requested. The decision rests with the funding body, based on your sector, its criteria and its budgets. Colombani.ai prepares the application with you.
Pricing by quotation, charged per group rather than per person, according to the format, group size and level of expertise. OPCO or FIF-PL funding is available. The amount payable after funding is often well below the list price.
Accessibility
This course is accessible to people with disabilities. Contact the disability officer in advance to discuss possible adjustments.
Ulysse Trin, [email protected]
Post-training support
Frequently asked questions
Is the AI Act already in force? +
Yes, in phases. Prohibitions have applied since February 2025 and transparency duties since August 2026. The AI Omnibus moved the main Annex III high-risk rules to December 2027 and product-embedded rules to August 2028.
Is my company affected by the AI Act? +
If you use or deploy AI systems in the EU, yes. The training teaches you to classify your uses and determine your exact obligations.
Do I need legal knowledge? +
Basic GDPR knowledge is enough. The training is designed for operational roles (DPOs, CIOs, executives), not just lawyers.
Related courses
AI executive training: leadership and C-suite briefing
What AI actually changes in a business. Live demos, use cases by function, regulatory framework. The starting point for decision-makers.
AI agent security training
The real risks of autonomous agents: prompt injection, exfiltration via MCP, sandboxing, permissions, security hooks. AI agent red teaming.
Got a project in mind?
Describe your situation. The first 30-minute call is free. Get a frank response within 48 hours.