Skip to content
TrAInyng

GDPR & NIS2 Training

Your teams apply GDPR and NIS2 day to day: rights, DPIA, data breaches, records.

Starting from

100€/h*

Duration

1 day - 2 days

What's included

Fundamental GDPR principles
Data subject rights
Data Protection Impact Assessment (DPIA)
Data breach management
NIS2 compliance and processing registry

* Entry hourly rate excluding VAT, preparation and travel. The final price depends on group size and format: request your quote, answer within 48 h.

Start with a 15-minute call, free and with no commitment

WhatsApp

For SMEs that process client, patient or staff data and want to move from principles to practice. GDPR has applied since 2018 and the Belgian NIS2 law has been in force since 18 October 2024: the training links the two without mixing them up. You leave with a first version of your records and procedures your teams know how to apply.

Who it is for

  • Admin, HR and sales managers
  • Data protection contact persons
  • SME owners and managers who want to know their obligations
  • IT teams managing access and backups

What you get

  • Keep records of processing that fit the company
  • Answer an access or erasure request on time
  • Recognise a data breach and follow the notification procedure
  • Know when a DPIA is needed and start one
  • Tell what falls under GDPR and what falls under NIS2

How it runs

  1. 1

    Principles applied to your business

    Legal basis, data minimisation, retention periods, informing individuals. Each principle is tied to a real processing activity in your company.

  2. 2

    Records of processing workshop

    Participants fill in the records for a few real activities: clients, staff, suppliers.

  3. 3

    Data subject rights

    Role plays: an access request from a former employee, an erasure request from a client, an objection to direct marketing.

  4. 4

    Data breach exercise

    Handle a breach scenario: whether to notify the Belgian Data Protection Authority, and whether to inform the people affected.

  5. 5

    DPIA and processors

    When an impact assessment is required, how to carry it out, and what to check in contracts with suppliers.

  6. 6

    The link with NIS2

    Who falls under the Belgian NIS2 law, which security measures overlap with GDPR, and how to avoid duplicated work.

Formats

  • In-company, on-site anywhere in Belgium
  • Remote or hybrid via Teams
  • 1 day for the essentials, 2 days with in-depth records and DPIA work

Prerequisites : No legal background needed; if possible, bring a list of your main files and software.

Frequently asked questions

Does this training replace a DPO?

No. It gives your teams the basics to apply GDPR day to day. Whether you must appoint a DPO depends on your activity; we help you check.

Is my company covered by NIS2?

It depends on your sector and size. The training gives you the criteria for a first check, and the Centre for Cybersecurity Belgium (CCB) also publishes useful guidance.

Can the training be tailored to our sector?

Yes. Examples and exercises start from your own processing: patient files, site data, client lists or HR data.

Let's talk about your team

15 minutes is enough to tailor the content, format and date. We agree three indicators together before we start.