AI Act and GDPR in Everyday Work – 22.10.2026
As part of the Bavarian AI Innovation Accelerator, appliedAI offers free, practical learning paths. The training supports companies, startups, and public institutions in building AI competencies, understanding the regulatory requirements of the EU AI Act, and implementing them specifically.
Discover where the EU AI Act and GDPR overlap in practice and what that means for the responsible use of AI systems in everyday work.
This training shows how the EU AI Act and GDPR work in parallel and what questions arise from this in the daily use of AI systems. The focus is on typical situations from professional life – such as handling personal data in email, CRM, HR, or office applications, shadow AI, or automated individual decisions.
Based on the three data levels of an AI system – training, input, and output data – you will learn to better assess situations relevant to data protection law. The aim is to recognize risks at an early stage and be able to assess when internal data protection or governance officers should be involved. The focus is on using AI systems from an operator's perspective, rather than on their development or provision.
Learning Objectives
You assess where GDPR becomes relevant alongside the EU AI Act based on training, input, and output data.
You recognize typical risk situations when using AI systems in everyday work and can better assess them.
You evaluate when existing AI governance processes for GDPR and EU AI Act are insufficient and when the data protection department or other internal officers should be involved.
Prerequisites: Basic knowledge of the EU AI Act, particularly regarding risk classes and roles along the value chain, is advantageous but not required. Prior knowledge of GDPR is not necessary. Personal experiences with AI systems and personal data in everyday work are helpful.
Trainer: Demian Niemeyer, Senior AI Regulatory Expert, appliedAI Institute for Europe
Target Audience: The training is aimed at everyone who uses AI systems in everyday work and comes into contact with personal data – from clerical staff to marketing and sales to executives. A legal or compliance background is not required. The training is not designed as a classical data protection training for data protection officers.
Many thanks to the community partners of the Bavarian AI Innovation Accelerator for their support in communicating and disseminating the project offerings: BIHK - Bavarian Industry and Trade Chamber e.V., vbw – Association of Bavarian Business e. V., Bayern Innovativ GmbH, UnternehmerTUM GmbH, Munich Innovation Ecosystem GmbH, fortiss GmbH, German Mittelstand e.V., BAIOSPHERE.
This training is offered as part of the Bavarian AI Innovation Accelerator. The project is funded by the Bavarian Ministry of Digital Affairs. Details: https://innovationsbeschleuniger.bayern/