Fundamentals of Secure AI Systems with Personal Data is a training for cybersecurity professionals, developers and deployers of AI systems on AI security & Personal Data Protection addressing the current AI needs and skill gaps.

The EDPB launched this project in the context of the Support Pool of Experts (SPE) programme at the request of the Hellenic Data Protection Authority (HDPA).

The project was completed by external expert Dr. Enrico GLEREAN in December 2024, updated in April 2025.

This project will be soon expended into a community version. This page will be update as soon as this new version is made available to the public.

Objective

The training aims to help cybersecurity professionals, developers, and deployers of high-risk AI systems reskill and upskill their technical capacity to design and implement advanced AI-enabled and data-driven systems. It integrates data protection and privacy principles with fundamental AI ethics principles in AI development.

Modules:

basic terminology of AI systems and their life-cycle;
the data privacy aspects of the AI systems life-cycle: data collection, privacy enhancing technologies, and in general, (personal) data flows before putting the system in production;
development of the AI system, considering good coding practices, secure sandboxes, and security testing of AI systems under development;
deployment of an AI system, monitoring, sustainability, and decommissioning;
checklists for auditing with a series of use cases and a deeper overview of the technological, legal, and ethical challenges in the field.

Further information:

This project will be soon made available into a community version. This page will be updated as soon as this new version is made available to the public.

The Board decided to publish both documents as PDF files. Taking into account the very fast evolution of AI, the EDPB also decided to launch a new innovative initiative as a one-year pilot project consisting of a modifiable community version of the reports. The EDPB will start working with the authors of both reports to import them in its Git repository** to allow, in a near future, any external contributor, with an account on this platform and under the condition of the Creative Commons Attribution-ShareAlike license, to propose changes or add comments to the documents.