The EU digital rulebook, learned the way it's applied: over time, on real cases.
Twelve lectures in a row give you a lot of law and very little of it sticks. This programme spreads the same ground over three months. Each week you study one topic at your own pace and apply it to a case, then meet your cohort for a one-hour check-in to test your reasoning against peers and the instructor.
Who it's for
In-house lawyers, compliance and data protection officers, CISOs and business owners who need to turn EU digital regulation into decisions. Cohorts are grouped by sector, for example financial services, public sector or tech. Each cohort deliberately mixes legal, technical and business backgrounds, because that is how these regulations are applied in practice.
After this course, participants can
- determine which EU digital regulations apply to their organisation, and why
- translate legal obligations into concrete controls, owners and deadlines
- assess incidents, data processing and AI use cases against the applicable rules
- work across legal, security and business teams in one shared language
- build a prioritised compliance roadmap for their own organisation
How your path adapts
The skill check reflects your background. Lawyers move quickly through the legal foundations and spend more time on controls and incident handling; technical participants get the reverse.
Your role in the cohort
In each monthly case, participants take one of four perspectives. Each role works from its own briefing. Every check-in turns those perspectives into a joint position.
Legal counsel
Interprets the obligations and their exposure.
Compliance officer
Turns obligations into controls, owners and evidence.
CISO
Owns the security and incident-reporting reality.
Business owner
Weighs cost, timing and the product roadmap.
Three months at a glance
| Month | Theme | Regulations | Monthly case |
|---|---|---|---|
| 1 | Cybersecurity and operational resilience | NIS2 (NKDL), DORA | A major incident: who must report what, to whom, by when |
| 2 | Data | GDPR | Launching a data-driven product across the EU |
| 3 | AI and digital trust | EU AI Act, eIDAS | Classifying and governing an AI system the company is deploying |
Format & time commitment
Weekly rhythm: a self-study module and case brief (about 2 hours, adaptive) → a 1-hour live check-in with the cohort → a short case memo, with AI-drafted feedback reviewed by the instructor. The final deliverable is a compliance roadmap for your own organisation. In total: 12 live hours plus about 2 hours of self-study a week.
[Instructor name]
[Credentials and a short bio.]
Questions
Why three months instead of an intensive course?
Digital Law in Practice
Three months, one hour a week with your cohort: master the EU digital rulebook while you apply it to your own organisation.