Universal Skills · Foundation · S2
AI, Data Protection & Confidentiality
What you can and can’t put into AI tools, GDPR, Monaco Loi 1.565, confidentiality
- Duration
- ½ day · 9:00–13:00 or 14:00–18:00 (3.75h contact, incl. 1 coffee break)
- Participant level
- Beginner: no AI experience needed
- Format
- Awareness workshop with real data scenarios
- Participants
- 15 included · 30 maximum (flexible group size)
- Prerequisite
- None
- Price
- EUR 3,500 (EUR 125 per extra participant)
Amounts in EUR, excl. VAT.
Regulatory statusMandatory, anyone handling personal or confidential data. Framed to your regime: GDPR (France/EU), Loi 1.565 + APDP (Monaco), or PDPL + DIFC/ADGM (UAE/Dubai); which foreign rules bind you follows the data and market you touch, not your partner’s location
ai-generatedWhat participants will be able to do
- Apply GDPR and Monaco Loi 1.565 to AI tool usage
- Identify what data must never enter an AI system
- Handle a data protection incident involving AI tools
- Complete the AIPD trigger assessment for an AI project
Tools & resources
What changes after this module
Everyone who handles personal or confidential data knows exactly what may and may not go into AI tools, how to stay compliant with GDPR and Monaco Loi 1.565, and how to avoid the data leaks that shadow AI causes.
Who should attend
Everyone. Beginner: no AI experience needed.
Programme
This agenda is indicative. Content, sequencing, and examples are adapted to your team's context, tools, and objectives.
Before you start
- No technical prerequisites
- Helpful: bring examples of the kinds of data/documents you work with (types, not actual sensitive content)
- A willingness to review your own habits
| 1 | 9:00–10:15 | The data you must protect: Personal data, special-category data, confidential/business data, IP; how AI tools process and may retain what you enter; why “just pasting it in” is a disclosure. Hands-onClassify a set of sample data items by sensitivity and allowed handling: the classification you’ll apply to your own workflow across the session. |
| 2 | 10:15–11:15 | The rules: GDPR & Monaco Loi 1.565: Lawful bases, data minimisation, purpose limitation, confidentiality: under your regime (GDPR, Monaco Loi 1.565, or UAE PDPL/DIFC); approved vs shadow tools; cross-border transfer & data sovereignty (why where the model runs matters, and that a partner abroad triggers rules only via the data/market you touch); DPIA/AIPD awareness. Hands-onDecide, for real scenarios, whether AI use is allowed and what to change to make it compliant. |
| 11:15–11:30 · ☕ Break | ||
| 3 | 11:30–12:20 | Safe practice & incidents: Minimisation and de-identification before use; using approved/enterprise tools with data protections; what a personal-data breach via AI looks like and how to report it fast. Hands-onTake one of your real workflows and redesign it to be data-protection-safe. |
| 4 | 12:20–13:00 | Wrap: Turning the rules into a personal habit. Hands-onBuild your personal “what I can/can’t put in AI” cheat-sheet and complete the attestation: the per-attendee record that is your organisation’s evidence of the training. |
Deliverables
- Personal data-handling cheat-sheet for AI
- A redesigned compliant workflow
- Completed attestation
Interested in running this module for your team? Get in touch and we'll tailor the format, dates, and delivery to your context.
Request this trainingYour trainer
Data-protection practitioner; working GDPR and Loi 1.565 knowledge applied to AI use
Discovery Session
This module requires a full day to deliver a meaningful learning experience. We only offer it in its complete format.
Frequent questions
Can modules be taken individually?
Yes. Every module stands alone at a fixed price, and every module counts toward a programme if you continue.
Where does training happen?
At your premises or remote, on your dates, for private cohorts. Open sessions run on a fixed monthly calendar.
Which AI tools do you train on?
Yours. Every module ships in four ecosystem editions and runs its exercises on your real stack.
Who delivers?
Inforca's senior consultants and trainers. Flagged modules and the executive track are delivered at senior-expert level.
Discuss this module in a First Call: fit, dates, and the path around it.
No commitment · our team responds within one business day