CompliQuest

Course Overview

Responsible use of AI in IT departments is no longer optional: under the EU’s AI Act and the GDPR, organisations must ensure that staff know how to adopt AI tools without jeopardising data security or privacy. This course translates those legal duties into clear, practical guidance for IT professionals. 

We start by showing how things can go wrong. One example follows an IT team that activates an AI-based cybersecurity monitor without telling employees which data it will collect; another details how login tracking justified as “legitimate interest” was introduced without any documented assessment; we also look at a case where an external threat detection system was purchased and rolled out without vetting the vendor’s privacy practices. Each example exposes the common pitfalls, such as a lack of transparency, missing risk assessments, and poor vendor due diligence, that can lead to legal trouble.

You then learn how to do it right: performing privacy impact assessments before launching any AI tool, clearly informing staff about what data is processed and why,
balancing security needs with legitimate interest tests, and carefully evaluating third-party AI providers. 

This module explores the interplay between the AI Act and GDPR, explaining how the two frameworks align and what they require of IT departments.

By the end of the course, you will be able to identify high-risk AI deployments, integrate robust data protection into your IT systems, and update internal policies and documentation. 

You will walk away with the confidence to harness AI’s benefits, from automated monitoring to vendor management, while keeping your organisation compliant and secure.

Who Is This For?

This course is ideal for IT professionals and teams who use AI tools in their daily operations and manage employee or organisational data, including:

1. IT managers & team leads – Ensuring responsible deployment of AI systems and maintaining data privacy compliance.
2. Cybersecurity specialists – Safely using AI to monitor network activities and detect threats without compromising employee privacy.
3. System administrators & IT analysts – Implementing compliant AI-driven tools while effectively managing privacy and security risks.
4. Compliance & privacy officers in IT – Identifying potential AI-related privacy risks and ensuring full compliance with data protection regulations.

Modules

• AI Literacy in the IT Department – Gain foundational knowledge on safely implementing AI tools for IT tasks, such as cybersecurity monitoring, employee login tracking, and external vendor assessment, while effectively protecting privacy and ensuring compliance with data protection regulations.