About this training
A 2-day intermediate program teaching the AI risk management discipline for Data Protection Officers (DPO), Compliance Officers, and legal counsels within the framework of the KVKK Generative AI Guide, EU AI Act, GDPR, and sector regulations (BDDK/EPDK/SGK). Includes DPIA, AIA, explicit consent, data subject rights, DPA negotiation, data breach management.
This training is designed for: DPOs (Data Protection Officers) and Privacy Officers Compliance Officers and Chief Compliance Officers (CCO) Legal counsels and corporate counsel Privacy lawyers and data protection law specialists Internal audit and risk management professionals Legal leaders of sectors regulated by BDDK / EPDK / SGK / TCMB / SEDDK
Why this course matters: The only program prepared specifically for DPO responsibility with a legal + compliance + privacy focus, differentiated from the CIO/CISO AI Governance training. Article-by-article detailed analysis of KVKK Generative AI Guide and Agentic AI Framework. Methodology for preparing DPIA + AIA + DPA + Privacy Notice + Explicit Consent templates. Discipline of DPA negotiation with OpenAI / Anthropic / Google AI vendors. Sector regulations of BDDK / EPDK / SGK / TCMB / SEDDK addressed in an integrated way. Provides concrete output presentable to the board and regulator by producing a DPO Compliance Charter + 12-month roadmap in the capstone.
Learning outcomes by the end of the programme: Manage all legal dimensions of AI projects within DPO and Compliance Officer responsibility. Correctly apply the KVKK Generative AI Guide and Agentic AI Framework. Prepare DPIA and AIA. Develop privacy notice and explicit consent templates for AI systems. Manage data subject rights in AI systems. Negotiate DPA with OpenAI, Anthropic, Google vendors. Manage AI-specific data breach response (72-hour KVKK + 15-day EU AI Act). Apply sector regulations like BDDK / EPDK / SGK to AI projects. Produce an integrated ISO 27701 + ISO 42001 certification roadmap.
Prerequisites and recommended background: DPO, Compliance Officer, legal counsel, or privacy lawyer position Basic knowledge of KVKK and GDPR Internal audit or compliance experience Law school graduate or similar legal background (advantage) General knowledge of your company's existing AI initiatives Tablet or laptop since DPIA / Privacy notice / DPA will be worked on
- Turkey's only comprehensive 2-day intermediate program addressing AI risk management within DPO and Compliance Officer responsibility
- Article-by-article analysis of KVKK Generative AI Guide's 15 questions + Agentic AI Framework
- Integrated GDPR + EU AI Act + KVKK application and extraterritorial scope management
- DPIA + AIA + Privacy Notice + Explicit Consent templates and preparation methodology
- DPA negotiation with OpenAI / Anthropic / Google AI vendors and sub-processor management
- Sector-specific AI compliance framework for BDDK / EPDK / SGK / TCMB / MASAK / SEDDK
Key Takeaways
- Manage all legal dimensions of AI projects within DPO and Compliance Officer responsibility.
- Correctly apply the KVKK Generative AI Guide and Agentic AI Framework.
- Prepare DPIA and AIA.
- Develop privacy notice and explicit consent templates for AI systems.
- Manage data subject rights in AI systems.
- Negotiate DPA with OpenAI, Anthropic, Google vendors.
- Manage AI-specific data breach response (72-hour KVKK + 15-day EU AI Act).
- Apply sector regulations like BDDK / EPDK / SGK to AI projects.
- Produce an integrated ISO 27701 + ISO 42001 certification roadmap.
AI Risk Management Training for DPOs and Compliance
A 2-day intermediate program teaching the AI risk management discipline for Data Protection Officers (DPO), Compliance Officers, and legal counsels within the framework of the KVKK Generative AI Guide, EU AI Act, GDPR, and sector regulations (BDDK/EPDK/SGK). Includes DPIA, AIA, explicit consent, data subject rights, DPA negotiation, data breach management.
About This Course
This training is designed for DPOs, Compliance Officers, legal counsels, and risk managers who want to end-to-end manage the legal, compliance, and audit dimensions of AI projects. It is clearly differentiated from the AI Governance training for CIO/CISO: that training focuses on technical risk, security, and audit; this training focuses on legal compliance, privacy, law, DPIA, and regulatory engagement. When both trainings are taken together, an organization's AI governance + compliance ecosystem is completed.
The disciplinary backbone of the program is article-by-article analysis of KVKK's Generative AI Guide (15 questions) and Agentic AI Framework published in 2024-2025; joint application of GDPR and EU AI Act; methodology for preparing Data Protection Impact Assessment (DPIA) and Algorithmic Impact Assessment (AIA); privacy notice and explicit consent management in the AI era; application of data subject rights in AI systems (right to be forgotten, right to explanation, objection to automated decision-making); DPA negotiation with OpenAI/Anthropic/Google vendors; AI-specific data breach management (integrated 72-hour KVKK + 15-day EU Article 73); BDDK/EPDK/SGK sector regulations; and continuous compliance monitoring + ISO 27701 + ISO 42001 certification integration.
The training consists of 2 days, 12 modules, and over 65 hands-on lessons. In the capstone, each participant produces a DPO Compliance Charter and 12-month roadmap for their company.
Training Methodology
Turkey's only comprehensive 2-day intermediate program addressing AI risk management within DPO and Compliance Officer responsibility
Article-by-article analysis of KVKK Generative AI Guide's 15 questions + Agentic AI Framework
Integrated GDPR + EU AI Act + KVKK application and extraterritorial scope management
DPIA + AIA + Privacy Notice + Explicit Consent templates and preparation methodology
DPA negotiation with OpenAI / Anthropic / Google AI vendors and sub-processor management
Sector-specific AI compliance framework for BDDK / EPDK / SGK / TCMB / MASAK / SEDDK
Who Is This For?
Why This Course?
The only program prepared specifically for DPO responsibility with a legal + compliance + privacy focus, differentiated from the CIO/CISO AI Governance training.
Article-by-article detailed analysis of KVKK Generative AI Guide and Agentic AI Framework.
Methodology for preparing DPIA + AIA + DPA + Privacy Notice + Explicit Consent templates.
Discipline of DPA negotiation with OpenAI / Anthropic / Google AI vendors.
Sector regulations of BDDK / EPDK / SGK / TCMB / SEDDK addressed in an integrated way.
Provides concrete output presentable to the board and regulator by producing a DPO Compliance Charter + 12-month roadmap in the capstone.
Learning Outcomes
Requirements
Course Curriculum
55 LessonsInstructor
Şükrü Yusuf KAYA
AI Architect | Enterprise AI & LLM Training | Stanford University | Software & Technology Consultant
Şükrü Yusuf KAYA is an internationally experienced AI Consultant and Technology Strategist leading the integration of artificial intelligence technologies into the global business landscape. With operations spanning 6 different countries, he bridges the gap between the theoretical boundaries of technology and practical business needs, overseeing end-to-end AI projects in data-critical sectors such as banking, e-commerce, retail, and logistics. Deepening his technical expertise particularly in Generative AI and Large Language Models (LLMs), KAYA ensures that organizations build architectures that shape the future rather than relying on short-term solutions. His visionary approach to transforming complex algorithms and advanced systems into tangible business value aligned with corporate growth targets has positioned him as a sought-after solution partner in the industry. Distinguished by his role as an instructor alongside his consulting and project management career, Şükrü Yusuf KAYA is driven by the motto of "Making AI accessible and applicable for everyone." Through comprehensive training programs designed for a wide spectrum of professionals—from technical teams to C-level executives—he prioritizes increasing organizational AI literacy and establishing a sustainable culture of technological transformation.
Frequently Asked Questions
Apply for Training
Boutique training with limited seats.
Pre-register for Next Groups
Leave your info to be the first to know when the next batch opens.
1-on-1 Mentorship
Book a private session.
Categories
Related programs
Healthcare AI Training: Hospital Operations, Clinical Decision Support, Imaging Triage and Clinical RAG
Hospital operations, clinical decision support, medical imaging triage and clinical knowledge base RAG — an end-to-end hands-on program tailored to Türkiye's healthcare sector, framed within KVKK, EU AI Act and TİTCK compliance.
2 GünallAI for Energy: Smart Grid, Generation Forecasting & Predictive Maintenance Training
Generation forecasting, smart grid, predictive maintenance and EPDK-compliant AI architecture — an end-to-end hands-on program tailored to Türkiye's energy sector.
2 GünallProfessional Software Development with Claude Code Training
A comprehensive, advanced 4-day training program for software professionals seeking enterprise-level mastery of Anthropic's agentic coding platform, Claude Code. Production-grade agent architecture with MCP integrations, Hooks, Sub-agents, Skills, and the Claude Agent SDK.
4 Günadvanced
