Your data and AI tools: What you can and cannot share
A ready-made course you customise for your organisation, with a live session deck and two surveys. You only add the 7 details that are specific to your organisation.
- Length
- 30 min
- Lessons
- 6 lessons
- Frequency
- At hire, annually
- Last reviewed
- 21 Oct 2026
You want an AI summary of a customer complaint
Try it: this is one of 17 interactive activities in the course.
What's included
Three pieces that work together
Copy once, get everything. Learners prepare on their own, you answer questions live, and the surveys tell you what stuck.
Self-paced course
Short lessons with real workplace scenarios, not walls of text.
- 6 lessons, about 30 minutes
- Scenario, sorting activity, process, timeline and quizzes
- 10-question final check, 80% to pass
Live session deck
An AhaSlides presentation to run after the course, in person or online.
- 10 slides
- Quiz, poll, word cloud, scale slides
- A closing slide for your contacts
Two surveys
Find out what landed, and whether people use it on the job.
- Post-course feedback, about 2 minutes
- 30-day check-in
- Anonymous by default
- Results feed your next refresher
Learning objectives
At the end of this course, learners can
Each objective and the lesson that covers it.
| ID | Objective | Source | Where it's covered |
|---|---|---|---|
| TO 126.0 | Achieve ≥ 80% on the final assessment | - | Whole course |
| SO 126.1 | Classify information as public, internal, confidential or personal before using an AI tool + your info | GDPR Art. 5; ISO/IEC 27001:2022; organisation's classification scheme | Whole course |
| SO 126.2 | Choose an approved tool or account type that fits the data + your info | Organisation's approved tool list | Whole course |
| SO 126.3 | Remove or anonymise personal data in prompts and uploads | GDPR Art. 5 (data minimisation); EDPB Opinion 28/2024 | Whole course |
| SO 126.4 | Recognise shadow AI and over-broad connector permissions as sources of exposure | OWASP Top 10 for LLM Apps 2025 LLM02 | Whole course |
| SO 126.5 | Act quickly and report when data has been shared by mistake + your info | Organisation's incident procedure | Whole course |
Your part: what a template can't do for you
- Your workplace details: fill in the 7 highlighted fields so the course describes your own policies, contacts and locations.
- Records: record completion in your own LMS or record system.
Course outline
6 lessons, about 30 minutes
Minutes per lesson are an estimate, shared out by page count.
1An AI assistant exposes salary files
3 pages
6 min
An AI assistant exposes salary files
3 pages
2Personal data, confidentiality classes and shadow AI
3 pages
6 min
Personal data, confidentiality classes and shadow AI
3 pages
3The five-step check before you paste or connect
3 pages
5 min
The five-step check before you paste or connect
3 pages
4Grey areas: permissions, meeting notes, customer lists
3 pages
5 min
Grey areas: permissions, meeting notes, customer lists
3 pages
5Reporting an incident and requesting approved tools
2 pages
4 min
Reporting an incident and requesting approved tools
2 pages
6Final assessment and acknowledgement
Assessment
4 min
Final assessment and acknowledgement
Assessment
Live deck and surveys
10 slides to run live, two surveys to close the loop
Pink slides are interactive. Both surveys are anonymous; pink questions are written for this course.
Post-course feedback: 10 questions, about 2 min
- Overall rating 5 stars
- Relevant, realistic, right length, helpful activities agree/disagree grid
- What was most useful? multi-select
- Confidence before this course, and now 1-5 scale
- Which kinds of work information have you put into AI tools? multiple choice
- Do you use a personal or work AI account? multiple choice
- Do you know our data classification levels? multiple choice
- One thing we should change or add open text
- Would you recommend this course? NPS
30-day check-in
- Have you used what you learned since the course? multiple choice
- How confident are you today? Compare with day 1 1-5 scale
- A moment where the training helped, or where you weren't sure open text
- Which topics should the next refresher focus on? ranking
Results show whether people use the training on the job, not just whether they finished it.
Make it yours
7 fields to fill in, and you're ready
Everything else is done. These are the details only your organisation knows; each one is highlighted inside the course.
- Classification levels and examples
{{DATA_CLASSIFICATION_POLICY_LINK}} - Tools and what data class each may take
{{APPROVED_AI_TOOLS}} - Where to report data shared by mistake
{{DATA_PROTECTION_CONTACT}} - How to ask for a new tool
{{TOOL_REQUEST_LINK}} - Surveys and completion record
{{SURVEY_1_URL}} - Surveys and completion record
{{SURVEY_2_URL}}
Show all 7 fields
- Surveys and completion record
{{LMS_OR_RECORD_SYSTEM}}
FAQ
Common questions
Can I run your data and AI tools: What you can and cannot share training online?
Yes. The course is self-paced and online, and the live deck lets you add a live session in the room or online.
How often is this training needed?
At hire, annually, and when an AI tool is approved or restricted.
Who needs this training?
All employees; run by data protection, IT security or L&D.
What records should I keep?
Record completion in your own LMS or record system, so you can show who finished the course and when.
Can I edit the content?
Yes, everything. Change the wording, swap scenarios for ones from your workplace, add your logo, or remove parts that don't apply.
Related templates
Often taught together
Secure AI-assisted software development: Coding assistants and agents without the risk
Software developers · AI security
AI security for everyone: Shadow AI, prompt injection and manipulated outputs
All employees; security champions · AI security
Deepfakes and AI-enabled fraud: Spot, stop and report synthetic voice, video and image scams
All staff · AI security
Ready to run it?
Open the live deck to see how the session runs alongside the course and both surveys.