Data Protection & AI · Updated July 2026
Is AI Language Training GDPR-Compliant? The 5-Point Checklist
5 checkpoints · EU AI Act Art. 50 from 02.08.2026
Is AI language training GDPR-compliant?
Yes – AI language training can be run in a fully GDPR-compliant way. The GDPR does not prohibit AI; it requires that personal data is processed lawfully, transparently, and for a defined purpose. In AI language training, the relevant data is primarily employees' voice recordings, conversation content, and learning progress. Whether an offer is compliant is decided not by the technology but by five concrete points you should check with every provider.
Server location & data flow
Where do audio and video streams travel, where does the AI respond? The provider must be able to name the complete data flow – EU servers are the benchmark.
No AI training on user data
Enterprise APIs from major AI providers do not use data for model training by default – free consumer chatbots often do. Get it confirmed in writing.
Retention & deletion
Are conversations stored permanently or discarded after the session? Clear deletion periods and access rights belong in the contract.
Data processing agreement (DPA)
The provider processes employee data on your behalf – a DPA under Art. 28 GDPR including a sub-processor list is mandatory, not optional.
AI transparency labelling
Employees must know they are talking to an AI. From 2 August 2026, Art. 50 of the EU AI Act makes this a legal requirement.
GDPR Checklist for AI Language Training
This checklist works for any provider – ask these questions before rollout, not after:
| Criterion | Why it matters | What to look for |
|---|---|---|
| Server location & data flow | Voice recordings are personal data; third-country transfers need additional safeguards (Art. 44 ff. GDPR). | EU servers for media streams; a complete map of all services involved, not just the frontend. |
| No training on user data | If conversations feed model training, they permanently leave your control – deletion becomes practically impossible. | Written confirmation that API data is not used for training; be wary of free consumer tools. |
| Retention & deletion | The GDPR requires storage limitation (Art. 5) – employee conversations stored indefinitely are a liability risk. | Defined deletion periods; recordings only with users' explicit consent. |
| DPA & sub-processors | Without a data processing agreement under Art. 28 GDPR, your company is liable for an unclear processing chain. | DPA with a complete sub-processor list (STT, LLM, TTS, avatar, hosting) before signing. |
| AI labelling (transparency) | From 02.08.2026, Art. 50 EU AI Act requires that users can recognise AI interaction and AI content is labelled. | The avatar is openly named as AI – avoid providers that pass their AI off as human. |
| Co-determination & internal sign-off | Systems that could capture performance data touch co-determination rights in Germany (§87 BetrVG). | Involve the works council and DPO early; clarify that learning progress is not performance appraisal. |
How Does Simmonds Protect Your Employees' Voice Data?
The most important difference is architectural: the audio and video streams of our AI avatar sessions run through a self-hosted LiveKit server on our own hardware at Hetzner in Nuremberg, Germany. Media streams do not pass through a US video vendor's cloud – they stay on EU infrastructure under our direct control. Avatar rendering also runs on our own server.
For speech understanding and the avatar's responses we use enterprise interfaces from major AI providers. According to OpenAI's API policy, data sent via the API is not used to train models by default – which fundamentally distinguishes enterprise APIs from free consumer chatbots. Conversation content is not permanently stored; recordings exist only on request and under the users' control. We provide the complete sub-processor list and the DPA before you sign – details and DPA on request.
And because the question comes up regularly: your employees' learning progress serves the training itself – it is not a performance appraisal tool and is not prepared as one.
What Does the EU AI Act Require from 2 August 2026?
From 2 August 2026, the transparency obligations of the EU AI Act apply (Art. 50, Regulation (EU) 2024/1689). Two points affect AI language training directly: first, people interacting with an AI system must be informed – an AI avatar must not pass itself off as a human teacher. Second, AI-generated content such as avatar video must be labelled as AI-generated in a machine-readable, recognisable way.
Our position: honest labelling is a mark of quality, not a weakness. Our AI avatar is called exactly that everywhere – AI avatar. Nobody should believe they are talking to a human; the avatar is the practice tool between sessions with real native-speaker trainers. We therefore see the AI Act's labelling obligations not as a burden but as a commitment we are actively implementing – and as a useful filter: providers that hide their AI usually don't answer the data protection questions above cleanly either.
What's Next?
If you are evaluating AI language training for your team, we recommend this order: first send the checklist above to all candidates, then involve your works council and DPO, then test. We answer the five points transparently and are happy to show you the AI avatar in a free demo session.
Note: This page provides general information and is not legal advice. Binding assessments for your specific case come from your data protection officer and legal team. Last updated: July 2026.
Related Pages
- AI English training: avatar + real trainers →
- AI avatar vs. English teacher: the comparison →
- What does corporate English training cost? →
- Online corporate training at a glance →
Ask us the five questions from the checklist – we answer them in writing, DPA included.
Request a demo sessionHow much does it cost?
| Format | Duration | Price (approx.) | Notes |
|---|---|---|---|
| Online — Private lessons | 90 minutes | €65–70 | 1:1, Zoom / Teams / Meet |
| Online — Corporate lessons | 90 minutes | €97.50–105 | Small groups, tailored curriculum |
| In-person | 90 minutes | €115 | On-site or our office in Berlin / Hanover |
Prices depend on format, frequency, and requirements. Language instruction is VAT-exempt (§4 Nr.21 UStG).
Who we work with
“Wir schulen seit 5 Jahren unsere Teams über Simmonds. Die branchenspezifischen Materialien und die Flexibilität der Trainer machen den Unterschied.”
Laura M., Leiterin Personalentwicklung, DHL Supply Chain“Nach einem dreimonatigen Intensivtraining konnte ich meine erste internationale Präsentation souverän auf Englisch halten.”
Stefan K., Projektleiter, Continental AG“Die kostenlosen Online-Lektionen haben mich überzeugt. Die Qualität des Einzelunterrichts hat meine Erwartungen übertroffen.”
Anna H., Marketing ManagerinFrequently asked questions
Is AI language training GDPR-compliant?+−
What happens to our employees' voice data?+−
Are the conversations used to train the AI?+−
Do we need a works council agreement for AI language training?+−
What does the EU AI Act change for language training from August 2026?+−
Improve your English for free
Free online lessons twice a week, vocabulary trainer with 600 words, and a placement test – all without signing up.
Get in touch
Tell us briefly what you need English or German for — we'll suggest the best format for your goals and schedule.
We typically respond within one working day.
What to expect
- ✓Confident in meetings
- ✓Persuasive presentations
- ✓Professional negotiations
- ✓Texts that work