The teams at this organization handled sensitive and personal data every day, but their legacy privacy training was a slide deck with quizzes that learners clicked through. Engagement was low, behaviours were inconsistent, and audit findings flagged gaps in classification, secure sharing, and incident response. The organization needed a hands-on, role-relevant experience that would turn policy into repeatable actions and generate evidence of learning—without increasing time away from work.