Pathway: AI for data protection and privacy officers

Who this is for

Data protection and privacy officers, information security and compliance staff, records and IT managers, legal and audit officers and any officer who is asked "is it safe to use this AI tool with our data?". It is open to all grades. No technical background is needed, but it helps if you already know the basics of how AI tools work. The operational officers pathway covers those basics if you want to start there.

What you will be able to do

By the end you will be able to:

• explain how AI tools can collect, keep and reuse personal data and where the risk sits
• map where personal data goes when your office uses an AI tool
• ask the right questions about a tool or vendor before it is approved and decide to approve it, approve it with conditions or refuse it
• respond calmly and quickly when personal data leaks, including through a tool nobody approved
• explain to citizens, in plain language, when and how AI is used with their information and how they can ask for a correction or complain

How it works

There are five modules. Each takes 10 to 15 minutes and ends with a short exercise and a self-check. Take them in order: each one builds on the last. There is no sign-up, no test and no certificate.

This pathway does not set out the law on personal data in Pakistan and does not suggest that any AI tool is approved for official use. The National AI Policy 2025 refers to a draft personal data protection law, so check the current legal position with your department's legal adviser before relying on any rule. Always follow your department's instructions. Decisions about approving tools, handling incidents and answering citizens stay with authorised officers.