Data Protection Institute

What Data Protection Institute does

Data Protection Institute (DPI) is a Belgian private training organization founded in 2012 in Antwerp, specializing in professional education at the intersection of data protection, information security, and data management. Since April 2021 it has operated as a majority-owned subsidiary of Toreon BV, a cybersecurity services firm, which added Threat Modeling training and a CISO Certification Track to DPI's portfolio. The company delivers multi-day certification programs (notably the 6-day DPO Certification and the 14-day CISO Certification), practitioner courses (2-6 days), annual Stay Tuned subscription programs for continuous DPO and security-leader education, and customized in-house training, all available in Dutch, French, and English across six Belgian locations plus an online channel. Course content is custom-developed in-house and delivered via a proprietary online learning platform for materials, tests, and assessments.

DPI's business model combines one-time course fees for certification and practitioner programs with recurring annual subscription revenue from Stay Tuned, a freemium trial layer (Stay Tuned Free Seats and the quarterly Privacy Café community event), and customized in-house delivery for enterprise and government clients. SME enrollments in Flanders are channeled through the KMO-portefeuille subsidy scheme (up to 45% for small enterprises), while public-sector clients receive structurally reduced pricing. The company targets six primary customer segments: Data Protection Officers and privacy professionals (primary), CISO and security leaders, government and public sector, healthcare, developers and technical staff, and police and law enforcement.

The company has trained more than 3,000 professionals cumulatively since inception and holds recognized training partner status with over ten Belgian and international bodies (IAPP, ISACA Belgium, BIBF, IAB, IBR, IJE, FSMA, KMO-portefeuille, BEE Brussels, Le FOREM, Chèque Formation). Its Threat Modeling training was selected by Black Hat USA for five consecutive years through 2021, and DPI was nominated by Trends Gazellen in 2021 as a fast-growing Antwerp enterprise. Recent portfolio expansion targets the EU AI Act (AI for DPOs, AI4Boards), NIS2 (Lead Implementer Belgium, board-level healthcare edition), and the Cyber Resilience Act (CRA Lead Implementer).

Name

Data Protection Institute

Legal name

Data Protection Institute BV

Website

https://dp-institute.eu

Company type

Private

Founded year

2012

Operating status

Operating

Headcount range

11–50 employees

Short description

Data Protection Institute is a Belgian private training organization founded in 2012 that delivers multi-day certification, practitioner, and subscription-based courses in data protection, information security, and data management to DPOs, CISOs, government, healthcare, and developer audiences across Belgium in Dutch, French, and English.

Ownership category

akta.pro rank

Product category

Professional Training and Certification

NAICS

Professional and Management Development Training (611430), Computer Training (611420), Computer Training (61142)

SIC

Services-Educational Services (8200)

akta.pro primary industry

Data Privacy & Data Protection (e.g., GDPR/CCPA) (EDABADAC)

akta.pro secondary industries

Data Protection, Privacy & Information Handling (PII/PHI/PCI) Training (EDABAGAD), Information Technology (IT) & Cybersecurity Certifications (EDAAANAA)

Keywords

• Data protection training
• GDPR certification programs
• DPO certification courses
• Information security training
• CISO certification track

Headquarters

HQ city

Antwerp

HQ country

Belgium

HQ region

Europe

Offices8 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Infrastructure

Revenue model

1. Professional Training and Certification Programs: Revenue from multi-day professional training courses in data protection, IT security, and data management. Programs include DPO Certification Training (6 days), CISO Certification Track (14 days across 7 modules), and various practitioner courses ranging from 2 to 6 days. Participants pay per course or via Stay Tuned annual subscription.
2. Stay Tuned Annual Subscription: Annual subscription offering 4 quarterly training days per year, with choice of language (Dutch/French) and location (Ghent, Elewijt, Berchem, Leuven, Nivelles, Brussels). Provides ongoing education for DPOs and security leaders. Subscription auto-renews annually unless cancelled one month in advance.
3. In-house / Custom Training: Custom training delivered at client premises or online, tailored to organization-specific needs. Specialized instructors with more than 10 years of experience are matched to client requirements. Payment required one month before training start date.
4. Stay Tuned Member Discount: Stay Tuned subscribers receive 10% discount on all open training courses (excluding Stay Tuned formula prices). Additional benefit bundled with annual subscription.

Pricing tiers

Go-to-market motion4 records

Distribution channels4 records

Marketing channels7 records

Core offering

Data Protection Institute delivers multi-day professional certification and training programs in data protection, information security, and data management, anchored by a proprietary 3D training model that integrates these three disciplines. Its portfolio centers on the 6-day Data Protection Officer (DPO) Certification Training, the 7-module / 14-day CISO Certification Track, and a Stay Tuned annual subscription program that delivers 4 quarterly training days per year to DPOs and security leaders across Belgian locations in Dutch, French, and English.

Product overview

Data Protection Institute (DPI) is a Belgian training organization founded in 2012 specializing in data protection, information security, and data management education. DPI operates a multi-product portfolio organized around three core disciplines (the '3D model'): Data Protection (DPO certification and practitioner courses), IT Security (CISO certification track and security operations), and Data Management. The primary product is the Data Protection Officer Certification Training (6-day program), supported by the Stay Tuned as DPO subscription service providing quarterly updates. DPI expanded its portfolio through a 2021 partnership with Toreon, acquiring internationally-recognized Threat Modeling training and launching a comprehensive CISO Certification Track. Additional offerings include specialized tracks for government, healthcare, and police sectors, AI-focused courses for DPOs, and in-house/customized training delivery options. DPI has trained over 3,000 professionals and is accredited by Belgian regulatory bodies including IBR-IRE, IAPP, FSMA, and Flemish/KMO-portefeuille.

Differentiator

Problem solved

Functional benefit

Brands

• Stay Tuned as DPO: Quarterly subscription program providing four training days per year with GDPR updates, legal insights, and practical implementation guidance for DPOs.
• Stay Tuned Free Seats
• CISO Certification Track

Products and services

• Data Protection Officer Certification Training A 6-day intensive certification program (5 days + 1 return day) that prepares participants for the Data Protection Officer role, covering GDPR regulations, practical implementation, and professional practice requirements. Designed for professionals working as or aspiring to become DPOs within organizations.
• Stay Tuned as DPO An annual subscription delivering 4 quarterly session days per year covering GDPR updates, EU case law analysis, and practical implementation topics for practicing DPOs. Sessions are available in Dutch and French across multiple Belgian locations (Ghent, Elewijt, Berchem, Leuven, Nivelles, Brussels/Diegem). Subscription auto-renews annually unless cancelled one month in advance.
• CISO Certification Track A comprehensive 7-module, 14-day certification program for Chief Information Security Officers covering security governance, security architecture, secure system acquisition and development, security operations, threat and vulnerability management, and strategic security leadership and stakeholder management. Includes a master project for CISO certification.
• Stay Tuned as Security Leader A quarterly subscription program for CISO and security professionals providing ongoing updates on cybersecurity trends, regulations, and best practices, delivered across multiple Belgian locations in Dutch and French.
• AI for DPOs A 3-day training program introducing data protection and artificial intelligence concepts, covering AI applications, risks, governance frameworks, and compliance requirements under the AI Act and GDPR. Targeted at practicing DPOs.
• Threat Modeling Practitioner A hybrid online training (20 hours blended) teaching threat modeling methodologies and secure development practices, including integration with the OWASP Top 10 and STRIDE framework. Targeted at developers and security professionals.
• Data Governance for DPOs Training program teaching DPOs data governance fundamentals including handling access requests, data classification, risk analysis, and data lifecycle management. Co-developed with Data Trust Associates and delivered by their experts.
• Privacy by Design for Developers Developer-focused training on integrating privacy principles into software development lifecycles, covering technical and organizational measures for GDPR compliance. Often delivered as in-house training for development teams.
• Data Protection Auditor Training GDPR auditor certification training enabling participants to assess company compliance using developed GDPR management system frameworks. Targeted at professionals responsible for auditing and ensuring GDPR compliance within organizations.
• NIS2 Lead Implementer Belgium A 2-day training program focusing on practical implementation of Belgian NIS2 cybersecurity legislation for organizations within the European Union. Targeted at security and compliance professionals in regulated entities.
• CRA Lead Implementer
• DPO Certificatie – Overheid (Government) A 2-day supplemental certification program for government sector DPOs, building on the core 5-day DPO certification with government-specific compliance requirements. Held at Park Inn by Radisson Leuven.
• DPO Certificatie – Zorg (Healthcare) A 2-day supplemental certification program for healthcare sector DPOs covering healthcare-specific data protection requirements and compliance challenges.
• DPO Certificatie – Politie (Police) A specialized certification track for law enforcement DPOs addressing police-specific data protection and GDPR considerations, including processing of criminal data under specific legal frameworks.
• Data Protection & Technology A 2-day training course on technological aspects of GDPR for legal professionals and advocates, covering data management and privacy by design implementation.
• GDPR Impact Assessments: DTIA & DPIA Training on conducting Data Protection Impact Assessments (DPIA) and Data Transfer Impact Assessments / Legitimate Interest Assessments as required under GDPR Article 35.
• EU Case Law for DPO Practice Course analyzing Court of Justice of the EU rulings and translating them into practical DPO guidance and implementation strategies.
• Juridische Inleiding tot Data Protection A 2-day introductory course explaining GDPR regulations and data protection fundamentals for legal professionals and newcomers to the field.
• Threat Modeling Medical Devices Specialized threat modeling training for medical device security, developed in partnership with MedCrypt. Targeted at security and engineering teams in medical device manufacturers.
• NIS2 Cybersecurity for Boards (Healthcare Edition) Board-focused cybersecurity training addressing NIS2 directive requirements specific to healthcare sector organizations and their governing bodies.
• Accelerating Business with Data Data management training focused on leveraging data assets for business value and operational efficiency.
• Data Governance 101 Foundational course on data governance principles and data steward responsibilities for organizational data management.
• In-House / Custom Training Customized on-site or at-location training for large companies and SMEs, available in Dutch, French, or English, with tailored content and specialized instructors having 10+ years of experience. Specialized instructors are matched to client requirements. Payment is required one month before training start date.

Quantifiable outcome

• More than 3,000 professionals trained in data protection since inception
• +1 more outcomes

Named customers16 records

Segments6 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

Five partnerships are on record, tiered core and minor.

• ToreoncoreStrategic or Co-development Partner · 23 April 2021DPI became a majority-owned subsidiary of Toreon BV as of April 23, 2021. Toreon provides cybersecurity and information security services in security-sensitive sectors including federal government and energy. Toreon's co-founder and CTO Sébastien Deleersnyder co-developed the CISO certification track with DPI. DPI also took over Toreon's existing training portfolio, including the internationally recognized Threat Modeling training.
• PinakesminorStrategic or Co-development PartnerIn 2025, DPI acquired data from Pinakes (BE 0473.692.867) containing contact details of persons in the government sector potentially interested in DPO training. Pinakes operates a database from legitimate interest to connect public and private sectors, providing twice-yearly notifications to individuals about their inclusion in the database.
• ISACA Belgium ChapterminorGTM or Marketing PartnerDPI collaborated with ISACA Belgium Chapter for the Leadership Webinar on Decision-Making Under Pressure, held on April 30, 2026. The webinar was based on a keynote previously delivered to the ISACA Belgium community. Nick Felix, a cybersecurity leader and keynote speaker, was the featured presenter.
• Data Trust AssociatescoreStrategic or Co-development PartnerDPI and Data Trust Associates co-developed the 'Data Governance for DPOs' training course. The course is designed to teach DPOs the fundamentals of data governance so they can support their organization in organizing, structuring, and managing data. The course is delivered by Christoph Balduck and Vincent Buekenhout from Data Trust Associates.
• EubeliusminorStrategic or Co-development PartnerAnneleen Van de Meulebroucke, a lawyer at Eubelius, serves as a Stay Tuned as DPO instructor, contributing legal expertise to quarterly GDPR update sessions for DPOs.

Scale indicators3 records

Recent moves7 records

Expansion highlights6 records

Broad incumbents

• IAPP (International Association of Privacy Professionals): IAPP is the world's largest global information privacy organization and runs the dominant CIPP/CIPM/CIPP/E certification programs. DPI is an official IAPP Training Partner, making IAPP the most directly comparable incumbent for privacy/DPO credentialing at a global scale.
• ISACA: ISACA is the global professional association for IT governance, cybersecurity, and risk, and runs the CISA/CISM/CGEIT/CRISC certifications. DPI's CISO Certification Track directly mirrors the CISM-style curriculum and DPI partners with ISACA Belgium Chapter, making ISACA a direct peer in the CISO/security leadership training market.
• BSI (British Standards Institution) Training: BSI runs ISO 27001/27701 and GDPR-related professional training globally. While BSI is broader (standards body plus training), it competes in the same privacy/information security certification training market that DPI addresses with its auditor and lead implementer courses.
• SANS Institute: SANS Institute is the dominant global cybersecurity training organization running the GIAC certifications and partnering with Black Hat on training. DPI's Black Hat-selected Threat Modeling training and CISO track compete for the same security leadership and developer-facing training budgets in the Benelux.
• SGS Academy: SGS runs auditor, ISO, and compliance training across multiple standards. SGS Academy's GDPR, NIS2, and ISO 27701 offerings overlap with DPI's auditor and lead implementer courses, competing for in-house training and certification budgets at large multinationals.
• DNV (Training by DNV): DNV provides ISO management system certification and related lead auditor/implementer training, competing for the same auditor-track learners that DPI addresses with its GDPR Lead Auditor training and Belgium-specific certification programs.

Direct peers

• PECB: PECB is a certification body offering ISO 27001, ISO 27701, GDPR, and NIS2 lead implementer/auditor courses that overlap directly with DPI's Data Protection Auditor Training, NIS2 Lead Implementer, and CRA Lead Implementer tracks. Both compete for the same professional seeking ISO-aligned certifications.

Emerging players

• CIPPE / EuroPriSe (European Privacy Certification): EuroPriSe certifies products, services, and processes against European privacy criteria. While smaller and more specialized than DPI, EuroPriSe serves adjacent European DPOs and privacy professionals pursuing credentials beyond traditional certification bodies.

Regional players

• Amadeus Solutions (GDPR training providers Benelux): Amadeus Solutions is a Benelux-based provider of GDPR and ISO 27001 training and implementation services. As a regional peer, Amadeus competes with DPI for SME and mid-market clients in the same Belgian/Flemish market using Dutch/French-language delivery.

Others

• Toreon: Toreon is the parent company of DPI (since April 2021) and a cybersecurity services firm whose Threat Modeling training is co-distributed by DPI. While technically DPI's parent rather than a competitor, Toreon's standalone Threat Modeling and security consulting work overlaps with the IT-security segment of DPI's curriculum.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/DataPro47503576

Compliance5 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Data Protection Institute