Free online courses and government-funded programmes cover AI basics but stop at general awareness. They do not address your organisation's specific policies, permitted data use, or what to do when AI produces harmful outputs. And they do not produce the documented compliance evidence the ICO's audit controls require.
The ICO's five audit control measures are specific. Training must be delivered to all staff before they access personal data. It must happen within one month of their start date. Assessment records and senior management sign-off must be documented. A short online course or annual e-learning module does not meet that standard when AI tools are in scope.
The DSIT Flexible AI Upskilling Fund evaluation (January 2026) found that fewer than half of trained employees could quality-assure AI outputs after completing their training. The problem is not awareness. It is the distance between knowing AI tools exist and knowing how to use them safely within your organisation's own rules and data environment.