GDPR training plan: schedule, track, prove
Organizing GDPR training is one thing. Being able to prove it during a CNIL audit is what accountability demands. Adequacy's Training module lets you schedule your sessions, manage learners, and generate sign-in sheets, attendance certificates, and annual GDPR training plans in a single click — ready to be embedded in your annual DPO report.
Sessions and learners
Sign-in sheets
Attendance certificates
Annual training plan
They trust us
From GDPR training plan to accountability evidence
The Training module is built around two core concepts: the session (the program, its format, its dates) and the learners (the participants, their attendance, their supporting documents). Together, they feed your annual GDPR training plan and the associated audit evidence.
Detailed sessions
Describe every session with its learning format (in-person, e-learning, workshop), educational structure, topic, duration, and scheduled dates.
Learner management
Add the learners enrolled for each session and record their actual attendance. Bulk-import the list for high-volume sessions.
Sign-in sheet
Generate the session's sign-in sheet in one click, ready to be signed on the day and archived as proof of delivery in the event of a CNIL audit.
Attendance certificates
Issue individual or group certificates for every learner who attended. Each certificate is generated automatically from the session data.
Annual GDPR training plan
Generate the GDPR training plan summarizing every session over a rolling year — a consolidated view ready for your Annual DPO Report.
Training report
Generate the training report per business unit, or — for privileged users — across the entire scope. A turnkey accountability proof for multi-entity organizations.
Document every session with the precision your training plan demands
Each GDPR training session is recorded with full specifications: learning format (in-person classes, distance learning, custom format), educational structure (topic, syllabus, trainer), and operational details (dates, duration, location, expected participants).
The module also lets you duplicate an existing session to quickly create a new edition — the parameters are copied, but the learners are not.
Learning format: in-person, e-learning, workshop, or custom
Educational structure: topic, syllabus, trainers
Scheduled dates, exact duration, expected participant count
Session duplication for recurring GDPR training
Automatic counter for registered and attending learners
Synthèse des écarts et comparaison dans le temps
Manage attendance and generate evidence in just a few clicks
For each GDPR training session, add learners individually or import them in bulk (privileged users). Mark each learner's attendance. The module automatically updates the session counters.
If you don't need to manage learners by name, simply enter the number of participants present — enough to feed the GDPR training plan and accountability reports.
Add, edit, and remove learners per session
Bulk import for high-volume sessions
Individual attendance checkbox with automatic counter update
Sign-in sheet generated from learner data
Individual or group certificates in one click
Décision d'homologation et suivi périodique dans le temps
Votre parcours de conformité cyber en trois temps
Du diagnostic à la preuve, Adequacy Cyber structure chaque étape et fait le lien entre l'évaluation, le plan d'action et l'homologation de sécurité.
Évaluer votre niveau de sécurité
Mesurez votre niveau réel : répondez aux questionnaires des référentiels retenus, visualisez la synthèse des écarts et comparez votre progression d'une évaluation à l'autre.
Piloter votre plan d'action
Structurez et corrigez : les écarts alimentent votre plan d'action, vous documentez vos mesures organisationnelles, logiques et physiques et auditez vos applications.
Homologuer vos services
Prouvez votre maîtrise : constituez le dossier d'homologation, obtenez la décision formelle de l'autorité et maintenez-la à jour par un suivi périodique.
GDPR training: a regulatory obligation that must be evidenced
Article 5.2 of the GDPR requires every data controller to demonstrate compliance. Staff awareness and training on data protection rules are among the expected organizational measures — and their delivery must be documented.
During a CNIL audit or internal review, the DPO must be able to present concrete evidence: which training sessions were organized, for whom, and how often. The annual training plan generated by Adequacy directly answers that requirement.
Adequacy Training turns this documentary burden into a smooth process: schedule, track, generate. Your annual report builds itself, session after session.
GDPR Article 5.2 — Accountability: staff training as direct evidence
The data controller must demonstrate compliance with GDPR principles. Training staff on data protection is a directly expected organizational measure — and must be documented to be defensible.
Annual DPO report: GDPR training plan embedded in the report
The GDPR training plan is one of the core elements of the annual DPO report. Adequacy generates it automatically from recorded sessions, ready to be embedded in the annual activity report.
Audits and CNIL inspections: every document available in just a few clicks
Sign-in sheets, individual certificates, multi-entity reports: every document expected during an ISO audit, a CNIL inspection, or an internal review is immediately available from the Training module.
Adequacy Cyber remplace et élargit l'Add-On NIS 2
NIS 2 reste intégralement couvert : il devient l'un des référentiels d'Adequacy Cyber, aux côtés des autres cadres. La migration se fait sans reprise ni ressaisie.
FAQ - GDPR training plan and DPO accountability
No. If you don't want to manage learners individually, simply enter the number of participants who actually attended in the dedicated field. That information is enough to feed the GDPR training plan and the reports. Recording learners by name is useful if you want to generate automated sign-in sheets and individual attendance certificates.
The module generates: the session sign-in sheet, individual attendance certificates for every learner present, group certificates, the rolling annual GDPR training plan, and the training report per entity (or multi-entity for privileged users). All documents are generated automatically from the data you enter.
Yes. A CISO can use it for cybersecurity awareness campaigns, an HR team for internal training, an ESG officer for compliance workshops. The module's structure — sessions, learners, attendance, documents — applies to any structured training requiring traceability, well beyond GDPR training.
Duplication creates a new session with the same parameters as the original (learning format, structure, topic, duration…). The learners from the original session are not copied. This makes it easy to spin up a new edition of a recurring training — such as an annual GDPR awareness session — without re-entering every specification.
Privileged users have two additional capabilities: bulk learner import via file (useful for high-volume sessions) and access to the full training report covering every entity within their scope. This is particularly valuable for group DPOs or multi-site training officers consolidating their GDPR training plan.
The annual GDPR training plan summarizes every session over a rolling year: format, structure, dates, participant count. This is the format expected in a DPO report to justify awareness initiatives. It can be exported and presented during a CNIL audit as accountability evidence (GDPR Article 5.2).
Adequacy Cyber est un outil de pilotage de la conformité cybersécurité : il structure la gouvernance, évalue la conformité en continu, outille l'homologation des services et centralise la gestion des incidents, le tout sans multiplier les outils. Il s'appuie sur le socle Adequacy que vous connaissez déjà : même ergonomie, même base référentielle, mêmes entités, aucune reprise ni ressaisie de données.