Training your teams: the first security measure
Raising awareness is one of the DPO’s missions (Article 39 of the GDPR) — and for AI, a legal obligation for your teams since February 2025 (Article 4 of the AI Act). Six formats calibrated by audience, delivered in-house, built on your real-life situations.
Six formats, from the field to the boardroom
A session that speaks to a caregiver bores a director, and vice versa: each format is calibrated for its audience — duration, content, practical cases and prices known in advance.
Healthcare GDPR essentials
Care staff, medical secretaries, administrative teams
- Everyday reflexes: email, passwords, screens, paper
- Professional secrecy and the GDPR: what changes, what doesn’t
- Responding to a patient exercising their rights
- Recognising and reporting an incident
2 hrs, remote — up to 15 participants
from €990 excl. VAT
AI literacy — Article 4 of the AI Act
Any organisation using or deploying AI
- What Article 4 actually requires of your teams
- Mapping your AI uses — including “invisible” generative AI
- Risks, transparency and good reflexes in a healthcare context
- Establishing an internal usage policy your teams can apply
Half-day, on-site or remote — up to 15 participants
from €1,500 excl. VAT
Governance & leadership
CEOs, chairs, executive committees (CPTS, MSP, EHPAD, healthcare facilities)
- Your responsibilities as an executive, without the jargon
- What an inspection looks at first
- Making the calls: what to address this year, what to document, what to delegate
- The DPO’s exact role — and what they cannot carry alone
90 min, committee format — up to 12 participants
from €1,200 excl. VAT
Compliance relays & leads
Departmental compliance leads — healthcare facilities and multi-site organisations
- The regulatory foundations applied to each department
- Owning your scope: records, access rights, incidents
- Getting information flowing to the DPO — without friction
- Practical cases drawn from your own facility
1 day, on-site — up to 12 participants
from €2,500 excl. VAT
Data & product
Tech and product teams — software vendors, startups, medtechs
- Privacy by design applied to your architecture
- Qualifying your processing activities and roles (controller / processor) without getting it wrong
- HDS, AI Act for products: what your buyers will check
- Answering a buyer’s questionnaire without improvising
Half-day, on-site or remote — up to 12 participants
from €1,800 excl. VAT
Crisis exercise — data breach
Leadership, IT, communications, DPO — all sectors
- A realistic scenario played out in real time, adapted to your organisation
- Assessing, deciding, notifying: the 72 hours, simulated
- Who speaks, who decides, who documents — roles put to the test
- Written debrief: what held up, what needs to change
Half-day, tabletop format — up to 12 participants
from €2,200 excl. VAT
Starting prices excl. VAT, in-house delivery; travel expenses added for on-site sessions outside the Île-de-France region. Every proposal specifies the programme, the audience and the deliverables.
Concrete cases, lasting reflexes, tangible proof
A successful awareness session is not measured at the end of the session, but three months later — in everyday habits, and in the file you will be able to present.
- Cases built from your real context — never a generic slide deck
- Course materials handed to every participant
- An end-of-session retention quiz and a summary for leadership
- A certificate of attendance in each participant’s name
Training: what we are asked
Is training our teams a legal requirement?
In part, yes. Under the GDPR, raising staff awareness is one of the data protection officer’s missions (Article 39), and since February 2025, Article 4 of the European AI Act requires organisations deploying AI systems to ensure a sufficient level of AI literacy among their staff. Beyond the obligation, a trained team is the first security measure — most breaches start with human error.
Do you run open inter-company sessions?
No — in-house only, for your organisation. This is deliberate: the value of an awareness session lies in your organisation’s concrete cases, your tools and your real-life situations. A shared format across several structures under the same operator (multi-site, group) remains possible.
Are the training sessions eligible for funding (OPCO)?
Our sessions are awareness-raising and support services, invoiced directly — no funding file to put together, so no delay. Clients on a DPO subscription benefit from the preferential terms set out in their contract.
Can you build a tailored format?
Yes. The six formats cover the most frequent needs, but a specific programme — a new regulation, an internal project, a particular audience — can be scoped in a single conversation. The price is set before any commitment, as with all our offers.
Which format for your teams?
Describe your audience and your context: we will recommend the right format — or build one tailored to you, with the price known before any commitment.
Reply within 24 business hours · No commitment