TrainingData Protection (GDPR)GDPR

Processing personal data in the EU for US-based companies

A practical guide for US companies processing EU personal data — covering GDPR obligations, transfer mechanisms, and Schrems II impact.

Plan your training

A programme for your team

Discuss this course
Delivery format
Discuss remote or on-site options
Duration & language
Confirm the schedule and language before booking
Dates & price
Agreed in your team's training proposal

About This Course

US-based companies that process personal data from the EU face unique challenges in complying with European data protection regulations such as the GDPR and navigating the implications of the Schrems II ruling. This course helps participants understand these complexities and equips them with the knowledge and skills required to implement effective data processing and compliance strategies. Participants gain an in-depth understanding of EU data protection requirements, legal concepts, and practical applications, enabling them to confidently manage EU personal data, ensure compliance with relevant regulations, and mitigate potential risks.

What You Will Learn

  • Understand GDPR territorial scope and obligations for US-based organisations
  • Navigate international data transfer mechanisms post-Schrems II
  • Implement Standard Contractual Clauses and assess the EU-US Data Privacy Framework
  • Set up Records of Processing Activities and breach notification procedures for cross-border operations
  • Identify and avoid common compliance pitfalls based on real enforcement cases

Prerequisites

  • Working knowledge of US business operations that involve EU data
  • Basic awareness of data protection concepts
  • No prior GDPR expertise required
Course programme

How we'll spend the time.

Explore the agenda below. Discuss the depth, examples and schedule for your team before booking.

Discuss this agenda

  1. GDPR Fundamentals for US Organisations · 45 min
    Territorial scope, key definitions, and obligations for US companies processing EU personal data.

  2. International Data Transfers · 60 min
    Transfer mechanisms post-Schrems II. Standard contractual clauses, the EU-US Data Privacy Framework, and supplementary measures.

  3. Compliance Implementation · 45 min
    Records of processing, DPO requirements, and breach notification procedures for cross-border operations.

  4. Practical Case Studies · 30 min
    Real-world scenarios of US companies achieving GDPR compliance. Common pitfalls and enforcement trends.

Who should attend

Built around your role.

  • Compliance and Legal Officers focusing on GDPR readiness and risk management

  • Teams building products in regulated industries or processing sensitive data

  • Data Protection Officers and Privacy Specialists leading data governance efforts

  • Startups seeking secure and privacy-compliant applications to scale responsibly

  • Third-party risk managers and procurement officers evaluating vendor compliance

Continue the learning
All courses

Introduction to Security Engineering

CTOs and technical leaders driving secure system architecture at scale, Engineering teams embedding security and privacy into development lifecycle, Teams aiming to improve consistency and reduce firefighting, Web and Software Developers building secure and compliant applications, Security awareness or compliance training coordinators

Hands-on security engineering training covering OWASP, secure coding, and infrastructure hardening for dev teams.

Explore the programme

Introduction to Privacy Engineering

Engineering teams embedding security and privacy into development lifecycle, Teams building products in regulated industries or processing sensitive data, Data Protection Officers and Privacy Specialists leading data governance efforts, Web and Software Developers building secure and compliant applications, Security awareness or compliance training coordinators

Privacy engineering training — data protection by design, PETs, and privacy-preserving architectures for engineers.

Explore the programme
Processing personal data in the EU for US-based companies

Let's shape the session around your team.

Include “Processing personal data in the EU for US-based companies”, who will attend and the challenge you want to work through. We'll discuss the right scope, format and price.

Request a training proposal