New
Create data protection documentation more efficiently with effective prompts
Generative AI in Data Protection: Using Prompts Effectively – From VVT Entries to the DPIA Framework
This webinar is held in German.
This webinar is intended for participants who already have a basic understanding of the GDPR and who work on (or are responsible for) data protection documentation in their day-to-day work. The focus is not on “AI gimmicks,” but on a practical approach to creating documents in a more structured, consistent, and efficient manner—with clear quality and legal guidelines.
Participants will learn how to use effective prompts to generate robust drafts for key data protection artifacts—either from scratch or based on existing information (process descriptions, system overviews, roles, data categories):
VVT entries, TOM descriptions, DPIA scoping/structure, and data erasure concept building blocks. It is consistently emphasized that AI provides drafts—responsibility, review, and decision-making remain with humans.
The live demos use fictional/synthetic examples to ensure the format remains independent of company-specific details and to provide participants with clear “dos and don’ts” for handling sensitive information.
Contents
The Big Picture: Why Documentation Fails (and How Prompts Can Help)
- Common problems:
Missing input, inconsistent text, “copy-paste TOMs,” unclear responsibilities. - What AI can do—and what it can't (hallucinations, false confidence, lack of context).
- Basic principle:
AI as an assistant for design, structure, and quality—not as a decision-maker.
Legal Guidelines for Prompting in the Data Protection Documentary
- Copyright:
What can be included in your own prompt?
Are prompts protected by copyright?
And what about AI output? - Data Protection Law:
When is data considered personal data?
What conditions must be met for AI input? - General Rights of Personality:
The right to one's own image and the right to one's own voice – what needs to be considered here? - Trade secret:
What kind of sensitive data should not be fed into an AI?
Learning environment
In your online learning environment, you will find useful information, downloads and extra services for this training course once you have registered.
Your benefit
You learn
- Logically integrate VVT, TOMs, DSFA, and the fire suppression plan to ensure accountability and risk assessment.
- Improve the completeness, consistency, and traceability of prompts by strategically using quality gates.
- Legal guidelines must be observed when using generative AI, such as data protection, confidentiality, trade secrets, and copyright and personality rights.
- Build a custom prompt library and establish standards for reusable text blocks to work efficiently and consistently with generative AI.
- to systematically involve the relevant departments in order to efficiently obtain the necessary input for accurate and legally compliant documentation.
Methods
Keynote presentations, moderated discussions, live demonstrations (using hypothetical cases), and collaborative quality checks based on criteria lists.
Recommended for
Data protection officers, data protection coordinators, compliance/GRC roles, privacy managers, as well as specialists and managers responsible for documentation (e.g., HR, IT, marketing).
A basic understanding of the GDPR is required to participate; prior experience with VVT, TOM, or DSFA is a plus.
Joint online training
Train several employees
Price upon request
4 hours
In-person or Online
Appointment scheduled on an individual basis
- Customized training courses
- Direct application in practice
- Efficient use of time and resources
100% non-binding inquiry
Feedback within 24 hours
Or schedule an appointment and get personalized advice
Start dates and details
12.10.2026
Live-Online
25.02.2027
Live-Online
Booking number:
42731
€ 440,- plus VAT.
€ 523.60 incl. VAT.
Plan course
4 hours
Booking number:
42731
€ 440,- plus VAT.
€ 523.60 incl. VAT.
Plan course
4 hours
No suitable date?
You are welcome to be notified by e-mail as soon as new dates are released.
Please note: We use third-party tools for selected events. Personal data of the participant will be passed on to them for the implementation of the training offer. You can find more information in our privacy policy.