Data protection workshop

AI meets data protection practice: Reviewing, approving, managing incidents
From data processing agreements and data processing agreements to data protection impact assessments and data subject rights, to data protection incidents

AI assistants, large language models, and knowledge-based AI systems are increasingly becoming part of everyday business. This increases the demands on data protection documentation, contracts, transparency, security, and the protection of data subject rights.

The data protection workshop goes beyond theory. Using a comprehensive practical case study, you will follow the journey of an AI system from the initial data protection audit, through the record of processing activities, the data processing agreement, and the data protection impact assessment, to data subject rights, release, and incident response.

You revise an incomplete VVT entry, identify critical contract gaps, subject an AI-generated DSFA to a professional quality check, and decide on immediate measures, documentation, and possible reporting obligations in an incident simulation.

Prepare now instead of improvising later: As soon as AI systems work with company, customer, or employee data, data flows, responsibilities, contracts, deletion periods, authorizations, and data subject rights must be clarified. This workshop demonstrates which questions should be asked before procurement, piloting, and live operation, and how to create a transparent approval process.

Is your data protection practice ready for everyday AI use?
– Understand: What is current and relevant?
– Document: How does the AI correctly enter the VVT (Variable Traffic Logic)?
– Secure it contractually: What must the AVV regulate?
– Assess risks: Is a DSFA necessary and feasible?
– Creating transparency: How are the rights of data subjects fulfilled?
– Controlling incidents: How do we respond to AI-related data leaks?
– Develop performance: How does this become a customer offer?
– Implement: What should I take with me for the next 30 days?

Agenda
here You can find the detailed agenda here.

• Data Privacy Update Autumn 2026
• Fully map AI processing in the VVT
• Data processing agreements (DPA) in the use of AI – Reviewing AI contracts and identifying critical regulatory gaps
• DSFA in the use of AI
• When affected individuals ask questions: Explain AI processing in an understandable way and effectively fulfill their rights.
• When AI becomes a security risk: Recognizing data breaches and responding appropriately
• From data privacy problem to marketable service
• Your cases, our workshop: Developing solutions together

Topic collection and classification
We collect your specific questions in advance and at the beginning of the workshop and make sure that all questions are addressed, discussed and resolved by the end of the event. 

Documents:
Sample documents and checklists

Target audience
This workshop is aimed at qualified data protection professionals with varying levels of practical experience. Structured review steps and practical tools facilitate the initial steps. Experienced participants will delve into complex issues such as role distribution, vendor training, model changes, data extraction, human oversight, and technical safeguards.

To use
You will take away concrete work results, directly applicable testing steps and new ideas for clearly defined data protection services in customer business.

Location
Robert-Bosch-Str. 16
D-64293 Darmstadt

Certificate of competence
This workshop is a training course for data protection officers in accordance with the GDPR. All participants will receive a certificate of competence.

Catering
The seminar fee includes full board including lunch, coffee breaks and conference drinks.

lecturers
Hans-Detlef Krebs has been working as an external data protection officer for over 20 years.
Having worked on behalf of seven state governments (including in the European context), he has extensive theoretical and practical knowledge in this field. He serves numerous large and medium-sized enterprises in sensitive areas. In 2010, he was one of the first in Germany to receive the title Data protection officer certified according to DIN EN ISO/IEC 17024.