Award entries: Education and public awareness

RE.M.I. standing for Regulation Meets Innovation

Brief Description

RE.M.I. – Regulation Meets Innovation is a joint initiative of the National Commission for Data Protection (CNPD) and the Luxembourg AI Factory (Luxinnovation) that turns the relationship between regulators and innovators into a permanent, structured conversation rather than a late-stage compliance checkpoint. Built around an AI Community of Practices, RE.M.I. brings startups, large companies, hospitals, public institutions, research centres and fellow supervisory authorities into the same room to identify the concrete operational, technical and regulatory challenges raised by artificial intelligence, and to co-produce shared answers. Issues are qualified in plenary sessions, examined in expert led thematic working groups, and returned to the ecosystem as general recommendations and good practices. The outcome is a neutral, agile, free-to-join platform that makes data protection and AI Act compliance achievable by design, even for organisations with no dedicated legal capacity.

Age Assurance: A Joint Statement by the Information Commissioner’s Office and Ofcom

Brief Description

A joint statement with Ofcom, the UK’s online safety regulator, providing greater clarity for services that are likely to be accessed by children on how to meet their obligations under the UK’s data protection and online safety regimes when implementing age assurance.

Digital Adventures with Verinaz

Brief Description

Verinaz is a cartoon hero who fights against the various risks one might face in emerging new digital technologies, such as online shopping, digital games, biometric data, deepfakes and artificial intelligence applications.

Through her digital adventures, Verinaz guides children and adults alike on how to stay safe online, emphasising that protecting privacy in the digital world is just as important as protecting it in the physical world, whilst also providing guidance on the responsible use of digital technologies.

DIGITAL LITERACY FOR A SECURE FUTURE

Brief Description

“Digital Literacy for a Secure Future” is an educational project developed by the Personal Data Protection Authority to increase digital safety and privacy awareness. The project simplifies complex topics—such as data protection regulations, artificial intelligence risks, deepfake threats, and e-commerce security—into practical and easy-to-understand educational content. To create a widespread impact, the project was implemented across numerous provinces, targeting school administrators and teachers. Through extensive training programs, a large number of educators were trained to pass this knowledge down to their students and schools. By combining regulatory standards with large scale teacher training, the project establishes a sustainable model for national digital literacy and protects younger generations in the digital world.

2025-26 Information Commissioner’s Office (ICO) and Financial Conduct Authority (FCA) Regulatory Cooperation

Brief Description

The ICO and FCA worked together over 2025-26 to produce two novel joint statements for financial services firms on: 1) Targeted Support and direct marketing and 2) the use of vulnerability-related data.

The first statement on Targeted Support explains how firms can use personal data to communicate information and suggestions that support more consumers to make decisions that improve their financial wellbeing. The second statement explains how firms can use and share vulnerability-related data to support consumers in vulnerable circumstances, in line with the FCA’s Consumer Duty, while complying with data protection law. These statements demonstrate an innovative, deeply coordinated approach to addressing complex issues at the intersection of financial services and data protection regulation. They show how proactive regulatory cooperation can address industry calls for clarity, raising much needed awareness on how firms should support consumers while safeguarding information rights.

A Free E Learning Course for Small and Medium-Sized Entrepreneurs “About Personal Data – EASY”

Brief Description

“About Personal Data – EASY!” is a free multilingual e learning course developed by the Data State Inspectorate of Latvia to transform the way organizations understand and implement personal data protection. Instead of explaining GDPR through complex legal language, the course translates regulatory requirements into practical, everyday solutions using videos, real-life scenarios, interactive exercises and ready-to-use templates. Designed primarily for small and medium-sized enterprises but open to everyone, the course removes financial, technical and geographical barriers to privacy education. Available in Latvian, English, Lithuanian and Estonian, it promotes a stronger privacy culture across the Baltic region and demonstrates that high-quality privacy education can be accessible to all.

Digital Privacy Awareness Campaign (DPAC) and Data Privacy Ambassador Programme (DPA Programme): Building a Privacy-Conscious Generation of Young Nigerians

Brief Description

The Digital Privacy Awareness Campaign (DPAC) and Data Privacy Ambassador (DPA) Programme are flagship initiatives of the Nigeria Data Protection Commission (NDPC) that promote privacy awareness among young Nigerians.

DPAC delivers privacy education through campus campaigns, masterclasses, panel discussions and interactive sessions, while the DPA Programme equips student leaders to serve as peer educators and privacy advocates. In seven months, the initiatives have reached over 250,000 young Nigerians across 265 tertiary institutions, established 85 Data Privacy Communities and 17 Data Privacy Clubs, and recruited 3,000 Data Privacy Ambassadors. The model combines education, youth leadership and institutional structures to drive lasting behavioural change, with a goal of reaching one million young Nigerians by 2027.

Grassroots Data Privacy Awareness Initiative: Promoting Data Protection through Traditional Institutions, Indigenous Languages and Community Engagement

Brief Description

The Digital Privacy Awareness Campaign (DPAC) and Data Privacy Ambassador (DPA) Programme are flagship initiatives of the Nigeria Data Protection Commission (NDPC) that promote privacy awareness among young Nigerians.

DPAC delivers privacy education through campus campaigns, masterclasses, panel discussions and interactive sessions, while the DPA Programme equips student leaders to serve as peer educators and privacy advocates. In seven months, the initiatives have reached over 250,000 young Nigerians across 265 tertiary institutions, established 85 Data Privacy Communities and 17 Data Privacy Clubs, and recruited 3,000 Data Privacy Ambassadors. The model combines education, youth leadership and institutional structures to drive lasting behavioural change, with a goal of reaching one million young Nigerians by 2027.

ODPA Seeds – Inspiring cultural change

Brief Description

ODPA Seeds is the Office of the Data Protection Authority’s education and outreach programme, with the ambitious aim of building a generation of informed digital citizens. Through interactive classroom sessions and community events, we bring data protection to life for children, helping them recognise the value of their personal information and the importance of respecting the rights of others. We do this through age-appropriate, curriculum-linked classroom resources, storytelling, workshops for parents, local partnerships and a flagship annual community gaming and online safety event.

Technology Radar No. 5 – Age Assurance Mechanisms

Brief Description

The ‘Technology Radar’ series is a periodic and strategic publication of the ANPD that aims to provide concise approaches to emerging technologies that impact, or are already impacting, the national and international data protection landscape. Without intending to exhaust the topics or establish institutional positions, the proposal is to add relevant information to the data protection debate in the country through educational texts accessible to the general public. Each edition presents core concepts, potentials, and future perspectives, always emphasizing the Brazilian context. The fifth edition focused on Age Assurance in Digital Environments, a decisive theme for the protection of children and adolescents online. The document deepens the understanding of different age assurance techniques, their applications, and their potential uses in the processing of personal data for this audience.

ANPD Danilo Doneda Award for Scientific Papers

Brief Description

The ANPD Danilo Doneda Award for Scientific Papers is an initiative of the National Data Protection Agency (ANPD) designed to encourage academic and scientific production on privacy, personal data protection, digital rights, and online security. In its fourth edition, the award seeks to stimulate the development of high-quality research, promote a qualified debate on relevant data protection themes in Brazil, and bring the academic community closer to the regulatory and institutional discussions conducted by the ANPD. The initiative honors Danilo Doneda, recognized for his contribution to the consolidation of personal data protection in the country, and awards undergraduate students and recent graduates (up to 1 year after graduation) with monetary prizes, certification, and the dissemination of the winning papers.

Kickstart Compliance: Data Protection in Sport

Brief Description

In November 2025, the DPC hosted a first-of-its-kind conference on data protection in sport, addressing the governance, safeguarding, and operational challenges faced by the amateur sports sector. The conference sought to simplify data protection for the sector by showing obligations and principles in a practical, accessible manner.

The agenda brought together regulators, governing bodies, lawyers, DPOs, and former professional athletes to share experiences and solutions. Sessions addressed a full spectrum of issues, from data protection basics and responsible use of technology to real-word experiences and children’s data protection in the context of safeguarding requirements. Recognising that many sports operate on an all-island basis, the conference featured contributions from the Information Commissioner’s Office’s Northern Ireland branch. By bringing together a uniquely diverse group of experts, the conference helped embed a stronger culture of data protection across Irish sports.

Report into preliminary inquiries of I-MED

Brief Description

The OAIC commenced preliminary inquiries with I-MED, Annalise.ai, and Harrison.ai after media reports alleging that I-MED had disclosed patient data (including medical imaging scans) to train a diagnostic artificial intelligence model. The reports related to the disclosure of medical imaging scans to Annalise.ai, a former joint venture between I-MED and Harrison.ai, a healthcare artificial intelligence company.

YoungData

Brief Description

YoungData.de is a joint platform for young people created by German data protection authorities. It presents data protection topics relevant to the everyday lives of young people in an easily understandable way, explaining technical and legal concepts while offering tips on how to protect one’s own data. News updates cover current developments and place them in context for a young audience. Longer articles provide background information and can be used for research in the classroom. For teachers, YoungData.de offers concise introductions to data protection topics, enabling them to discuss issues such as privacy and democracy with their students.

Abuse of AI Deepfakes: Toolkit for Schools and Parents

Brief Description

The “Abuse of AI Deepfakes: Toolkit for Schools and Parents” (“Toolkit”) is a guidance publication issued by the Office of the Privacy Commissioner for Personal Data, Hong Kong, China (“PCPD”) in December 2025. It aims to provide practical advice to schools and parents, with a view to assisting them in handling deepfake incidents involving children and young people, as well as safeguarding their privacy in relation to personal data.

The Inaugural National Data Protection Moot Court Competition 2025

Brief Description

The Inaugural National Data Protection Moot Court Competition 2025 was an innovative public awareness and legal education initiative by the Office of the Data Protection Commissioner (ODPC), Kenya. The competition brought together law students from universities across the country to argue simulated cases based on Kenya’s Data Protection Act, 2019 and emerging privacy challenges.

Held at the Supreme Court of Kenya, the initiative strengthened practical understanding of data protection law,
promoted privacy-conscious legal practice, and inspired future legal professionals to champion personal data protection. Through experiential learning, mentorship and judicial engagement, the competition bridged the gap between academic theory and practical application while fostering a culture of privacy and accountability.

Nationwide Educational Programme of the Personal Data Protection Office “Your data – Your concern. Effective protection of personal data. Educational activity addressed to students and teachers”

Brief Description

Educational activities and raising public awareness are a very important part of the activities of the Personal Data Protection Office. The GDPR places particular emphasis on the protection of children’s privacy and personal data in all European Union countries. This task is supported by the nationwide educational programme „Your Data – Your Concern”, which is being successfully implemented across the country with the aim of raising public awareness of personal data protection, particularly among children. The programme supports schools in the implementation of educational activities, provides teaching and training materials and initiates projects that facilitate the inclusion of the protection of personal data in everyday teaching practice. The programme is carried out under the honorary patronage of the Minister of Education and the Ombudsman for Children in order to improve the competences of teachers and to shape conscious and responsible attitudes among students.

Building a Privacy Aware Zimbabwe: National Data Protection Education and Awareness Programme

Brief Description

Building a Privacy Aware Zimbabwe is POTRAZ’s nationwide programme for translating data protection law into practical knowledge, professional competence and safer everyday behaviour. It combines public roadshows, Privacy Week and the National Privacy Symposium with a regionally recognised Data Protection Officer certification programme, sector-specific training, executive and board engagement, law enforcement, judiciary and prosecution capacity building, guidance materials, media outreach and multi-stakeholder working groups. Designed for an emerging regulatory environment, the programme reaches citizens, children, schools, businesses, public bodies, professionals and law enforcement officers in both urban and underserved communities. It has created a growing national community capable of understanding privacy rights, implementing organisational safeguards and sustaining compliance.

AI Scribes: Key Considerations for the Health Sector

Brief Description

An AI scribe is a type of artificial intelligence (AI) system that is gaining widespread popularity in Ontario and around the world for its potential to relieve administrative burden and positively transform the interactions between health care providers and the people to whom they provide care. AI scribes use speech recognition and natural language processing to produce summaries of care visits that can be entered into a health care provider’s electronic medical record (EMR) or an electronic health record (EHR). Some may also be able to produce reports, referral letters, and written communication to patients. Some have additional features that can help inform diagnostic and treatment decisions. The use of AI scribes can show considerable efficiency and productivity gains in a health care sector that is highly challenged by an aging population, rise in chronic diseases, resource constraints, and health staff shortages. Although the benefits of AI systems like AI scribes are exciting.

Info Matters podcast

Brief Description

Info Matters is one of the world’s few regulator-hosted podcasts dedicated to making complex privacy and access issues understandable, relatable, and actionable for the public. Information and Privacy Commissioner Patricia Kosseim invites voices from government, academia, civil society, industry, and lived experience, to transform technical policy discussions into conversations that empower people to better understand and exercise their rights. Topics range from AR rights and equality and the use of persuasive design to influence privacy decisions of minors, to the use of artificial intelligence and data analytics to improve patient care.

Become a Privacy Pro(tector) – acronym: PrivacyPRO

Brief Description

PrivacyPRO project is being implemented by the Information Commissioner of the Republic of Slovenia in years 2025 and 2026 and co-funded by the European Commission under the EU Citizens, Equality, Rights and Values Programme. It aims to enhance awareness and understanding of data protection among children, their caretakers and educational staff in Slovenia. The project implements a series of interlinked activities, based on the following educational materials: board game, comic book series, short video lectures and ready-to-use presentations. Materials aim to educate children about the risks associated with digital services and the importance of data protection in a fun and easy-to-understand manner. Materials for younger children are designed to engage them in an offline environment without increasing the time online. To facilitate the use of educational materials, workshops for educators are organized, adopting a “training the trainers” approach to disseminate knowledge effectively.