Privacy Training and Awareness

Curriculum built by role

One session for the whole company teaches the engineers nothing and overwhelms the sales team. We build a short core module everyone takes, then role-specific sessions that go deep on the decisions each function actually makes.

• All staff: what counts as personal data, the handling rules that apply to it, how to recognise an incident, and how to escalate one in the first hour.
• Engineering and product: data minimisation in design, retention and deletion in practice, test data, logging, third-party SDKs, and when a design decision requires an assessment.
• Marketing and growth: consent and preference management, tracking technologies, opt-out signals, audience building, and the rules governing purchased or enriched lists.
• Sales, support and operations: identity verification, rights requests arriving through the wrong channel, oversharing in tickets, and what may be promised in a customer security review.
• Leadership and board: the obligations that sit with them personally, the questions to ask before approving a launch, and what regulators expect of governance.

Delivered against your own examples

Generic scenarios invite generic attention. Sessions are built around your systems, your data, and incidents that have plausibly nearly happened at your company, with the policies your teams are actually expected to follow on screen. Where we have done the data mapping, the examples come straight from it.

Outcomes you can point to

Training is both a control and, in several regimes, an obligation with an evidentiary requirement attached. We design for both: people who make better decisions, and a record that shows who was trained, on what, and when.

• Measured change in the behaviours the training targeted, not just satisfaction scores.
• Completion records suitable for regulators, auditors and customer diligence.
• A refresher cadence tied to onboarding, role changes and material changes in the law.
• A named route for the questions that will come up afterwards, so people ask rather than guess.

AI use training

The fastest-moving risk in most companies is employees putting confidential and personal data into AI tools that were never approved. We deliver a session covering what may be used, what must never be entered, how outputs should be checked, and why the obligation does not disappear because the tool is convenient.