Small and medium-sized enterprises (SMEs) in Cyprus face growing challenges in keeping up with evolving data protection requirements, particularly in light of the General Data Protection Regulation (GDPR) and the proposed EU Artificial Intelligence Act (AIA). Limited resources, knowledge gaps, and the complexity of regulations make it difficult for SMEs to ensure compliance when adopting AI technologies. 

The Data ProTech project, a national initiative co-funded by the European Union, aims to strengthen the data protection capabilities of Cypriot SMEs, with a specific focus on AI use. The project’s goal is to help SMEs operationalize legal requirements into practical, actionable compliance steps and foster a culture of ongoing learning and adaptation. 

Using the ADDIE (Analyze, Design, Develop, Implement, Evaluate) methodology, Data ProTech offers a comprehensive approach that includes surveying SME compliance readiness, creating an AI-specific GDPR compliance tool for self-assessment, and delivering a hybrid educational program. A nationwide and EU-level awareness campaign will support widespread knowledge-sharing and promote a unified approach to data protection. 

Key components of the project include: 

• A compliance survey to map current SME needs and knowledge gaps. 

• A digital tool for self-assessment tailored to GDPR and AIA requirements. 

• Training programs combining in-person and online elements. 

• Awareness initiatives to encourage cross-border collaboration and knowledge transfer