GDPR and Privacy by Design in AI Projects
AI features and coding agents move data in new ways: into prompts, logs, vector stores and third-party services. In this half-day workshop your team learns to think about personal data from the start, using privacy by design principles and concrete engineering measures. This is general orientation for developers and not legal advice.
Request without obligation- Duration
- half day
- Level
- Intermediate
- Format
- Remote or on-site, English or German
- Group size
- Up to 12 participants per trainer
Who it is for
- Developers and architects of AI-enabled applications
- Product owners and tech leads
- Data protection contacts who support engineering teams
What your team will be able to do
- Map where personal data flows in an AI-enabled application
- Apply data minimisation, pseudonymisation and retention rules in design
- Recognise when external AI services act as processors and what to clarify
- Keep personal data out of prompts, logs and test data
- Prepare input for a data protection impact assessment together with your DPO
Agenda
- GDPR basics for engineersPersonal data, principles, rights of data subjects and where developers make decisions.
- Data flows in AI projectsTrace data through prompts, context, logs, embeddings and external APIs.
- Privacy by design in practiceMinimisation, purpose limitation, access control, deletion and retention built into architecture.
- Third-party AI servicesQuestions to clarify about processing agreements, hosting location, data use and sub-processors.
- Coding agents and personal dataKeep production data out of agent contexts and use synthetic or masked data for development.
- Working with your DPOPrepare documentation and questions that make assessments quicker.
Prerequisites
- Experience building applications that handle user data
- No legal background required
- Optional: a data flow description of one of your projects
Why apprat.io workshops
- Taught by practising AI Code Engineers
- Your repositories or a sandbox project
- AI speed, human responsibility: review, security and governance included
- ISO 9001 & ISO/IEC 27001 certified processes
- Follow-up office hours after 30 days
Request without obligation
Tell us about your team and goals. We reply within one business day with a tailored agenda and a quote – free and without obligation.
24/7 call support in English & German:
+49 761 519 751 50
Frequently asked questions
Is this legal advice?
No. It is practical orientation for engineering teams. Binding assessments belong with your data protection officer or legal counsel.
Does it cover non-EU requirements?
The focus is the GDPR. Other regimes are mentioned only for orientation.
Can we use real data in the exercises?
We recommend synthetic or masked data. It is also part of what you will learn to do.
Fields marked * are required.