Course · Interpersonal Skills
GDPR and AI
Data protection for lawyers using and advising on AI: personal data and roles, lawful bases, individual rights, security and breaches, processors and transfers, AI and automated decisions, and a privacy programme for a law firm.
Pay once, keep it forever · secure payment by Stripe
Every AI tool a lawyer might try takes in other people’s data, and every client now asks whether a tool is allowed. This course teaches the data protection framework that answers the question. It starts from the foundations of the EU and UK GDPR (what counts as personal data, who plays which role, the seven principles) and builds up through lawful bases, individual rights, security and breaches, processors and international transfers, and then applies all of it to AI: training data, prompts, profiling and automated decisions. It ends by turning the rules into a practical programme for a law firm and a one-page method for advising a client on a new AI tool.
The Curriculum
What the law protects: personal data, the main roles and the seven principles→
Personal data, special categories, controllers and processors, territorial reach and the seven principles. Practice: Is It Personal Data? and Who Is the Controller?
Lawful bases, consent and legitimate interests→
The six lawful bases, valid consent, the legitimate-interests test and special-category conditions. Practice: Pick the Basis and Is This Consent Valid?
The rights of individuals: information, access, correction, erasure and objection→
Privacy notices, access, rectification, erasure, restriction, portability, objection and handling a request. Practice: Which Right Is It? and Handle the Request.
Security, breaches and accountability: records, impact assessments and the 72 hours→
Security duties, breach response and the 72 hours, records, impact assessments, the data protection officer and privacy by design. Practice: Is It a Reportable Breach? and The First Hour.
Processors, contracts and international transfers→
The processor contract, vendor checks, sub-processors and the rules for sending data across borders. Practice: Build the Processor Contract and Which Transfer Tool?
AI and personal data: training, prompts, profiling and automated decisions→
Where personal data appears in AI, the principles applied to AI, profiling, Article 22, the risk-based approach to AI regulation and lawyers’ duties. Practice: Where Is the Personal Data? and Article 22 or Not?
Running privacy in a law firm, and advising clients on AI→
A practical privacy programme, advising a client on an AI tool, how laws differ around the world and common mistakes. Practice: Spot the Gap and Advise the Client.
Capstone: Capstone: review an AI tool for a law firm, from purpose to decision→
Assess a proposed AI tool for a law firm in one page, with a checklist, and reach a recommendation with conditions. Includes a practice room.
What It Covers
“You will not memorise articles. You will learn the questions to ask of any tool, and how to answer a client with a clear recommendation and honest conditions.”
- Seven modules and a capstone that move from foundations to AI, with the same few questions applied again and again.
- Built for lawyers: your own firm’s duties, privileged material, vendor contracts, and advising clients on tools.
- Stable principles only: it teaches how to analyse a new tool, and tells you where to check the current rules on AI and on transfers.
- Practice labs and rooms: sorting personal data, lawful bases and breaches, building a processor contract, handling a subject access request, Article 22 cases and a one-page tool review.
Included With All-Access · Or Buy It Alone
Introductory PriceChoose how you unlock GDPR and AI
Subscribe for every course and most tools, or buy just this one course on its own.
The one-time prices below are early, introductory rates for a brand-new catalog — expected to rise as we add more content. Buy now and it’s yours at today’s rate, forever.
Buying a course needs no account: you pay, and we email you a one-click sign-in. Subscriptions need a free account.
Look first, then buy. Free previews on every product page. Secure payment by Stripe. Pay once, keep it forever. Details
Or give this as a giftOther Scrolls in This Chamber
Across the Table$15 →Interests, walk-away numbers, offers, trades, pressure tactics and professional limits, with practice rooms and calculators.
Cooling the Room$15 →How conflict escalates, mapping a dispute, de-escalation, hard conversations, choosing a process, mediation, power, culture and ethics, with practice mediations.
The Client Conversation$15 →Trust, the first meeting, fees and scope, updates in plain words, advice and decisions, bad news, boundaries and ethics, with practice meetings.Part of a program
Step 11 of 12 in the Law and Data Practitioner Program
Learn to put honest numbers on legal work: risk, cases, contracts, money, negotiations, deals and regulation, and to show them so that people act. Each course is sold on its own; the whole program is $69 once and unlocks every course in it.
See the whole programModule 1 is free to try. Sign in, pass each module quiz and the course average, and your Certificate of Completion is emailed to you automatically. This course teaches method and technique with invented people and figures; it is general education, not legal advice, and professional rules differ from country to country.
Common questions
- Is this only about the EU GDPR?
- It teaches the GDPR and the closely similar UK regime, because many other laws are modelled on them. It also shows how laws elsewhere may differ, and tells you to check the law that applies to your client.
- Does it cover the EU’s AI regulation in detail?
- No. AI-specific laws are changing quickly, so the course explains the risk-based approach in general terms and teaches you how to check the current text. The data protection analysis, which is stable, is covered in depth.
- Do I need a background in technology?
- No. Technical ideas such as training data, prompts and logs are explained in plain words.
- Is this legal advice?
- No. It is general education using invented people and situations. Data protection law differs by country and changes over time, and applying it to a real case requires advice on the facts.
- How do I get the Certificate of Completion?
- Sign in, pass each module quiz and keep a course average of at least 75. The certificate is then issued and emailed to you automatically.
- How does it relate to the free Data Protection tool on this site?
- The free tool compares data protection laws by country. This course teaches how to apply the main framework to real questions, especially around AI.
Teaching? Share this with your class
Free to use in class. The free parts open for everyone, no account needed.