Create and manage training courses using our comprehensive and flexible Learning Management System (LMS).
COURSE
Responsible AI At Work
Responsible AI At Work
A practical, role-agnostic guide to using AI tools safely at work, getting the productivity benefits without exposing personal data, breaching policy, or relying on outputs you haven't verified. Across four modules, learners cover what responsible AI use means and who the policy applies to, how to minimise and anonymise data in prompts, how to choose and vet AI tools, and how to report incidents and seek guidance. Each module ends with a 5-question assessment (pass mark 4/5) and is delivered in 22 languages. Suitable for all staff, permanent, temporary, and contract, plus volunteers, interns, and third-party representatives
Module & Course Breakdown
4 Modules 54 Minutes Total Length
Introduction to Responsible AI at Work
Module 113 Min
Sets the foundation: what "responsible AI at work" actually means, why your organisation has an AI policy and who must follow it, and the basics of data protection. Learners distinguish ordinary, special-category, and confidential information, and learn the line between acceptable and prohibited uses of AI tools at work.
Applying Data Minimisation and Anonymisation in AI Prompts
Module 215 Min
How to strip a prompt down to what the model actually needs and anonymise the rest. Covers the data-minimisation principle, the four techniques (redact, generalise, pseudonymise, synthesise), the re-identification risk when "anonymous" details combine, and a reusable safe-prompt template (Task / Context / Constraint).
Selecting and Using AI Tools Safely
Module 314 Min
The difference between an approved enterprise tool and a free consumer one, and how to vet a tool before real use via a four-criteria check; retention, training, location, and contracts (DPA). Learners practise spotting red flags (e.g. unstated retention), hard red lines (HR/legal decisions), and why specific AI-generated facts must be verified against an official source.
Reporting Incidents and Seeking Guidance
Module 412 Min
What to do in the first hour after a slip. Covers the low reporting threshold ("may have been" exposed), why you preserve rather than delete the chat history, who to contact first (IT vs. Privacy), the good-faith no-blame reporting culture, and how manager loop-in fits in without becoming a gate.
COURSE
EU AI Act Essentials
EU AI Act Essentials
EU AI Act Essentials course is a story-driven introduction to the European Union's new rules for artificial intelligence. The course explains why the European Union introduced the AI Act, what counts as AI, and how the Act's risk-based approach works in real life.Through simple, everyday scenarios, learners explore the four risk categories, key obligations for AI providers and deployers, the role of general-purpose AI, and what enforcement and penalties will look like. By the end, participants gain a clear, practical understanding of the AI Act and its impact on organizations and AI development.
Module & Course Breakdown
2 Modules 15 Minutes Total Length
Overview
Module 19 Min
This module introduces the AI Act through everyday stories, explaining why it was created, what counts as AI, where it applies, and how the four risk categories work, starting from real examples of bias and discrimination.
EU AI Act in Action
Module 26 Min
This module focuses on practical compliance, using short stories to explain obligations for AI providers and deployers, the treatment of general-purpose AI, and what enforcement, penalties, and timelines mean in practice, ending with a reflection on trust in AI.
COURSE
Securing AI Assistants and Agents
Securing AI Assistants and Agents
Everyone is arguing about the model. Almost no real AI incident involves it.Securing AI Assistants and Agents covers what actually goes wrong: content an assistant reads becoming instructions it obeys, a connector surfacing files that were only ever protected by obscurity, and an agent taking a real action on a wrong answer. Each of the sixteen lessons has its own short video, followed by hands-on exercises and a five-question assessment at the end of every module.Written for the people who have to approve an AI rollout, not configure it.
Module & Course Breakdown
4 Modules 58 Minutes Total Length
How AI Systems Get Attacked
Module 114 min
Why a language model breaks the trust boundary every other system relies on: code gives instructions, data gets inspected, until both arrive in the same sentence. Maps the six-layer attack surface, who is attacking and what they want, and the frameworks that already cover this (OWASP, GDPR, the EU AI Act, ISO 42001).
Prompt Injection
Module 215 min
The attack class that defines AI security, and why no single control fixes it. Direct injection, indirect injection through a document the assistant reads, what an attacker actually gains, and the five layers of containment that together turn a breach into a nuisance.
Permissions, Connectors and Oversharing
Module 314 min
The most common real-world AI incident, and it isn`t an attack. Why "it respects existing permissions" is the problem rather than the reassurance, how to run a pre-deployment permission review, how to govern the retrieval index, and why oversharing is a personal data breach under Article 4(12).
Agents, Actions and Incident Response
Module 415 min
What changes the moment an assistant stops answering and starts doing. Blast radius of a compromised agent, what makes human oversight a real control rather than a click-through, and the five AI-specific additions your incident response plan needs.
COURSE
Bitesize Courses
Bitesize Courses
Bitesize is PrivacyEngine short-format microlearning line. Each piece covers one focused topic in about 2 minutes, not a full compliance course. They're built to:✓ Provide quick-hit content, with short, snackable pieces on common security and privacy topics. ✓ Reinforce one behaviour at a time, such as spotting phishing versus spam, handling personal data correctly, or recognising and reporting a data breach. Employees can finish one between tasks. ✓ Fill gaps between the longer annual courses. Organisations can assign them as refreshers, nudges or follow-ups after an incident.
Module & Course Breakdown
3 Modules 24 Minutes Total Length
Bitesize 01: Spam vs Phishing
Module 18 min
Two kinds of unwanted email, two completely different goals and two different responses. The single module covers the whole topic: what separates advertising from an attack, the six tells that give a phishing email away, a sorting exercise across eight realistic messages, and the correct response to each kind including what to do when a link has already been clicked. Ends with a five-question assessment.
Bitesize 02: What Counts as Personal Data?
Module 28 min
More than a name and an address, and rarely just the obvious fields. The single module covers the whole topic: why personal data is a test rather than a list, the six things that make a file with no names in it personal data anyway, a sorting exercise across eight everyday items, the difference between pseudonymised and genuinely anonymous, and what to do when collecting, sharing or unsure. Ends with a five-question assessment.
Bitesize 03: What Is a Data Breach, and What Isn`t
Module 38 min
Most breaches involve no hacker at all, which is exactly why they go unreported. The single module covers the whole topic: what actually makes something a personal data breach, seen, changed or lost; a Monday morning service desk queue where four of the six tickets are breaches and two are not, a sorting exercise across eight realistic incidents, and what to do when it happens to you, including why reporting beats deciding for yourself. Ends with a five-question assessment.
COURSE
Cyber Security at Home
Cyber Security at Home
With so much at stake, organisations need to be able to deliver continuous, effective and scalable digitised learning. The PrivacyEngine Data Protection Academy is here to help, with accessible, online and on-demand data privacy and GDPR training for every situation.
Module & Course Breakdown
13 Modules 1 Hour 16 Minutes Total Length
Importance Of Cyber Security
Module 17 Min
This module introduces practical cyber-security at home and on-the-move, helping you recognise and mitigate threats, boost tech savvy and reinforce learning via knowledge checks.
Authentication Factors And Importance Of Password
Module 27 Min
This module explains multi-factor authentication—requiring two or more factors (knowledge, possession, inherence) for enhanced security—and best practices for strong, unique passwords.
Safeguarding Emails
Module 33 Min
This module outlines email security risks like phishing and spam, and advises verifying links, using multiple accounts for different purposes and managing spam with filters.
Securing your Smartphone
Module 44 Min
This module outlines smartphone security: use strong locks, encryption and biometrics; disable unused Wi-Fi/Bluetooth; update apps; enable backups and tracking; factory-reset before sale.
Virtual Private Networks (VPNs)
Module 57 Min
This module explains the risks of free VPN apps, outlines VPN benefits (encryption, privacy, geo-spoofing), shows how they work, set-up options, performance impacts and anonymity limits.
The Internet Of Things (IOT)
Module 65 Min
This module explains IoT basics, its smart device risks and security best practices – from updating default credentials and software to securing home networks and staying informed.
Staying Safe on Social Media
Module 74 Min
This module covers social media security: adjust privacy settings, limit personal data sharing, manage third-party app permissions, detect fake profiles and guard against identity theft.
Let's Go Online Shopping!
Module 85 Min
This module covers safe online shopping: use unique strong passwords, secure networks, trusted HTTPS sites, avoid saving card details, enable two-factor authentication and monitor transactions.
Phishing
Module 95 Min
This module introduces phishing, how attackers use fake e-mails, calls and sites to steal data, outlines common types (deceptive, spear, vishing, smishing) and offers key prevention tips.
Ransomware
Module 108 Min
This module explains ransomware—malware that encrypts or locks files via phishing or malicious links, demands payment for decryption, and outlines key prevention steps.
Safeguarding Wi-Fi Networks
Module 119 Min
This module explains Wi-Fi vulnerabilities in home and public networks, and advises practical measures—renaming SSID, strong passwords, encryption, firmware updates and cautious usage.
Safeguarding Smart TVs
Module 121 Min
This module explains what smart TVs are, outlines privacy and security risks like hacking, spying and tracking, and offers practical tips to secure devices and disable intrusive tracking features.
Some Extra Tips
Module 1311 Min
This module stresses proactive cyber security: check breaches, prioritise sensitive accounts, update devices, avoid scams, use antivirus, and protect privacy to safeguard your data.
COURSE
Cyber Security Awareness
Cyber Security Awareness
This course details how to set up and maintain an Information Security Management System, as recommended by the International Organisation for Standardization. In practice, this means overhauling policies, procedures and staff training in the workplace to ensure there is a minimal risk of cyber attacks and data breaches occurring. Beginning with a description of the typical forms of malware that currently hit organisations, the course goes on to explain how to create safer staff policies on internet use, data storage and personal devices. The final module offers a brief introduction to GDPR, the Data Protection Act and other legislation which regulates issues over data breaches and information security. This course is suitable for all employees as part of your overall Cyber Security training and awareness activities.
Module & Course Breakdown
6 Modules 1 Hour 1 Minute Total Length
Introduction to Cyber Security
Module 18 Min
This module covers why cyber security is such an important topic in today’s workplace, and how you could be a target for hackers.
Introduction to Malware
Module 28 Min
This module covers the different types of malware, and how they can affect your computer, devices and workplace.
Internet Acceptable Use
Module 313 Min
This module covers examples of policies on using the internet at work, performing tasks online, and sending and receiving emails. It looks at some precautions you can take to the avoid becoming the target for a breach via email.
Information Security
Module 413 Min
This module examines the rules for storing and classifying data. As with email and internet usage, maintaining an awareness of these procedures will be critical to you helping your organisation to protect itself against leaks.
Device Security
Module 513 Min
This module covers guidelines for keeping your mobiles, tablets, laptops and home networks safe from malware and breaches. It takes a look at social engineering, and what tell tale signs to watch out for at work and on social media.
Legislation and Regulation
Module 66 Min
This module takes an overview of the EU General Data Protection Regulation. The GDPR is the guiding light on what information should be protected at all times from insider leaks and cyber attacks.
COURSE
GDPR Staff Awareness
GDPR Staff Awareness
This course provides an overview of the main requirements of GDPR for organisations. It begins by explaining what types of data needs to be protected under the regulation, then details the roles and responsibilities of the Data Controller and the Data Processor. Subsequent modules cover the key principles of Lawfulness and Accountability, as well as the individual rights of staff, customers and the general public guaranteed by GDPR. The final section introduces some practical precautions every staff member can take, and outlines a procedure to follow in the event of a data breach. This course is suitable for all employees as part of your overall GDPR training and awareness activities.
Module & Course Breakdown
4 Modules 25 Minutes Total Length
Overview
Module 19 Min
A brief overview of why data protection laws are needed. Outlines the purpose of the General Data Protection Regulation.
GDPR Principles
Module 28 Min
This module takes a look at the GDPR regulation's underlining principles of lawfulness and accountability.
Data Subject Rights
Module 34 Min
This module takes a look at your guaranteed rights as a staff member and private citizen under the GDPR.
Responsibilities
Module 44 Min
This module goes through some precautions you can take to help keep your personal data safe while at work and includes a brief overview on how to report a data breach.
COURSE
GDPR for HR Professionals
GDPR for HR Professionals
Streamline GDPR compliance in HR with clear privacy notices, secure data handling, lawful employee-data use and efficient access-request processes, minimising risk and building trust.
Module & Course Breakdown
3 Modules 28 Minutes Total Length
Introduction
Module 110 Min
This module acquaints HR professionals with GDPR principles, teaching them to manage employee data compliantly through real-life scenarios and knowledge-check activities.
Privacy Notices
Module 28 Min
This module outlines Privacy Notices: use cases and essential guidance on collecting, using, disclosing, retaining, securing and transferring personal data, and fulfilling individuals’ access rights.
Dealing with Data issues
Module 310 Min
This module outlines HR obligations under the GDPR for employee data, covering rights to access, rectification and erasure, security of storage and valid exemptions for SARs.
COURSE
GDPR for IT Professionals
GDPR for IT Professionals
Here you will learn how GDPR impacts IT and the role played by IT professionals in safeguarding data. You will also learn about how Data Protection Officers help companies achieve data security compliance. Here you will learn about the steps that can be taken by IT professionals to safeguard critical data. There are several Knowledge Check activities spread across this module. These activities feature real-life data-security scenarios that will help you become acquainted with the concepts.
Module & Course Breakdown
1 Modules 22 Minutes Total Length
GDPR for IT Professionals
Module 122 min
Here you will learn how GDPR impacts IT and the role played by IT professionals in safeguarding data. You will also learn about how Data Protection Officers help companies achieve data security compliance. Here you will learn about the steps that can be taken by IT professionals to safeguard critical data. There are several Knowledge Check activities spread across this module. These activities feature real-life data-security scenarios that will help you become acquainted with the concepts.
COURSE
GDPR for Marketing Professionals
GDPR for Marketing Professionals
Master GDPR essentials tailored for marketing professionals: learn how to responsibly collect, process and secure customer data, understand the critical role of Data Protection Officers, and reinforce your know-how with real-world scenarios and interactive checks. Dive in to ensure compliance, protect customer trust and boost your marketing impact.
Module & Course Breakdown
1 Modules 19 Minutes Total Length
GDPR for Marketing Professionals
Module 119 min
Master GDPR essentials tailored for marketing professionals: learn how to responsibly collect, process and secure customer data, understand the critical role of Data Protection Officers, and reinforce your know-how with real-world scenarios and interactive checks. Dive in to ensure compliance, protect customer trust and boost your marketing impact.
COURSE
12 Steps to GDPR Compliance
12 Steps to GDPR Compliance
This course provides detailed instructions for senior staff on how to implement our twelve-stage procedure for becoming compliant with GDPR. It is an on-the-go resource you can check any time you like. Throughout the course, you’ll need to answer several knowledge checks. These are designed to check how you’re progressing.
Module & Course Breakdown
12 Modules 1 Hour 16 Minutes Total Length
Awareness
Module 119 Min
In this module we’ll learn how to ensure that key decision makers in your organisation are aware of what GDPR entails, and can appreciate its impact on the business.
Information you Hold
Module 219 Min
This module covers assessing your data, conducting audits, identifying controller roles, understanding GDPR record-keeping obligations and selecting compliance policies.
Communicating Privacy Information
Module 313 Min
This module teaches how to assess collected data types, pinpoint when to inform data subjects and determine the necessary privacy information to provide.
Individual Rights
Module 49 Min
In this module, we’ll learn more about the key rights individuals have in relation to their data, and what your organisation needs to do to guarantee these rights.
Subject Access Requests
Module 521 Min
This module covers handling subject access requests, detailing valid SAR criteria, managing third-party data and practical steps for prompt, efficient organisational response.
Lawfulness
Module 631 Min
This module covers applying the lawfulness principle to personal data processing for controllers, noting processors also act as controllers for their staff and business contacts.
Consent
Module 722 Min
This module covers obtaining consent for processing standard, high-risk and sensitive personal data, outlining key elements and context-specific scenarios.
GDPR & Children
Module 86 Min
In this module, we’ll cover GDPR’s special considerations for children and discuss some practical compliance issues.
What is a Data Breach?
Module 913 Min
This module explains data breaches, covers GDPR duties, guides risk assessment and sets out policies and procedures for managing breaches.
Data Protection by Design and Default
Module 1017 Min
This module explains data protection by design and by default, outlines when a DPIA is required and guides you through conducting and submitting a DPIA.
The Data Protection Officer
Module 1110 Min
This module outlines the Data Protection Officer’s role and guides you through assessing if your organisation must appoint one.
Cross Border Processing
Module 1223 Min
This final module covers navigating data processing across multiple EEA Member States and outlines the rules for transferring personal data outside the EEA.
COURSE
California Consumer Privacy Act
California Consumer Privacy Act
The California Consumer Privacy Act (CCPA), enacted in 2018, creates new consumer rights relating to the access to, deletion of, and sharing of personal information that is collected by businesses. It also requires the Attorney General to solicit broad public participation and adopt regulations to further the CCPA's purposes. The proposed regulations establish procedures to facilitate consumers' new rights under the CCPA and provide guidance to businesses for how to comply.
Module & Course Breakdown
1 Modules 30 Minutes Total Length
California Consumer Privacy Act (CCPA)
Module 130 min
This course will explain CCPA in layman's terms, helping you prepare your business to comply with the law. This course can be taken by anyone with any level of privacy knowledge or experience.
COURSE
Data Protection in Bahrain
Data Protection in Bahrain
A short, practical course on Bahrain`s Personal Data Protection Law, built for everyday work rather than the statute book. It takes learners from "what even counts as personal data?" through the five data-protection principles, lawful bases and consent, keeping data secure, and the rights people can exercise, with the real deadlines and penalties that come with getting it wrong. Every lesson is hands-on (spot the sensitive data in an employee record, sort scenarios onto the right principle, walk the five-step rights-request flow), and each module ends with a short 5-question check. Designed for every employee who handles personal data, HR, sales, finance, customer support, operations, not just the IT or privacy team. No legal or technical background needed. Typically assigned by Data Protection Leads / DPOs, HR and L&D.
Module & Course Breakdown
5 Modules 42 Minutes Total Length
Data Protection Fundamentals
Module 19 min
What data protection really means, personal vs sensitive personal data, and who`s who under the PDPL.
The Law and Its Principles
Module 28 min
Bahrain`s PDPL and its supervisory Authority, the five core principles, and what they look like in practice.
Lawful Bases, Consent & Sensitive Data
Module 39 min
When you`re allowed to use personal data, getting consent right, and the stricter rules for sensitive data.
Keeping Data Safe
Module 47 min
How long to keep data, and the security basics that protect it day to day.
Rights, Complaints & Penalties
Module 59 min
The rights people can exercise, how to respond within the deadline, and what`s at stake, penalties up to BD 20,000.
COURSE
Data Protection in the UAE
Data Protection in the UAE
Data Protections training suitable for all levels of employees, covering the UAE PDPL, DIFC Data Protection Law, ADGM Data Protection Regulations (with GDPR for comparison). You learn how to explain what data protection is and why it matters (consequences of getting it wrong). Identify UAE PDPL key terminology (personal data, sensitive personal data, controller, processor, data subject). Explain why the three UAE data protection laws (PDPL, DIFC, ADGM) exist and where each applies. Apply each of the core data protection principles to a workplace scenario. Choose the correct lawful basis for processing and explain why consent matters. Recognise data subject rights and respond appropriately when one is exercised. Recognise a data breach in progress and follow the correct handling procedure.
Module & Course Breakdown
7 Modules 66 Minutes Total Length
Introduction to Data Protection
Module 17 min
Why data protection exists, why it matters to you personally, and what`s at stake when it goes wrong.
Key Terminology
Module 28 min
Lock in the eight core terms before we look at the law. Definitions matter using them incorrectly leads to bad decisions.
The UAE Legal Landscape
Module 310 min
Three data protection laws, three jurisdictions, three regulators. Here`s why and how to know which one applies to you.
Data Protection Principles
Module 410 min
The six core principles plus the overarching accountability obligation. The backbone of compliance.
Lawful Bases & Consent
Module 57 min
Every processing activity needs a lawful basis. Most of the time it isn`t consent and getting that distinction right matters.
Data Subject Rights
Module 612 min
Eight rights individuals can exercise. Eight obligations your organisation must be ready to meet.
Data Breaches & Security
Module 712 min
Security obligations, breach recognition, notification timelines, and your role when something goes wrong.
COURSE
Nigerian Data Protection Regulation
Nigerian Data Protection Regulation
This course provides an overview on the NDPR requirements for organisations, outlining key points & staff obligations. This course looks at the "The Bill" and the groups of people obligated to abide by it, the category of data, the principles & legal basis of processing personal data, the establishment of the Data Commission, Processing Data of sensitive data and more. Finishing with insight into what you can expect from "The Bill".
Module & Course Breakdown
1 Modules 20 Minutes Total Length
Nigerian Data Protection Regulation
Module 120 min
This course provides an overview on the NDPR requirements for organisations, outlining key points & staff obligations. This course looks at the "The Bill" and the groups of people obligated to abide by it, the category of data, the principles & legal basis of processing personal data, the establishment of the Data Commission, Processing Data of sensitive data and more. Finishing with insight into what you can expect from "The Bill".
COURSE
NINJIO
NINJIO
We have partnered with cybersecurity awareness training solution provider NINJIO to offer all PrivacyEngine customers their 3 to 4 minute Hollywood-style micro-learning videos to empower individuals and organisations to become defenders against cyberthreats.
Preview Episode4 Minutes
Revolutionary Cybersecurity Training
Preview Episode4 Minutes
What Separates Us from Traditional Training
Try Our Free Phishing Quiz
Try our free tool to test your staff. See how many fake emails they can spot and determine how likely they are to click on a malicious email.
See how we have helped over 300 companies set up their dedicated Privacy Programme
Reliable service, quick response to support cases, adapting the platform quickly to new privacy challenges. But the most valuable thing PE and people behind it, is the way of thinking, viewing and designing the solution. A design which make it easy to see all connections, easy to document and easy to demonstrate the compliance; PE makes DPO's life much easier, thank you PE!
Anwar Sulaiman
Data Protection Lead - SAAB
See how we have helped over 300 companies set up their dedicated Privacy Programme
The PrivacyEngine functionality is constantly being reviewed and improved to keep up with current needs. It is effortless to navigate through the site and to use all the tools provided. It has proven to be a necessity in how hush manage and shape our responses to GDPR and data protection queries.
Channing Neale
Office Manager, Hush
See how we have helped over 300 companies set up their dedicated Privacy Programme
An integral part of GDPR Compliance Strategy has been based on the adoptation and support of PrivacyEngine. The professional service by PrivacyEngine provides us with the confidence that our business is well informed and supported.
Sean O'Sullivan
Data Protection Lead - Harvey Norman
Schedule a Demo