The article highlights issues related to leading an expert organization. The regulation is changing practices across Europe. Training organizations should set an example of complying with the requirements of the law. Each student must have a sense of security in the learning environment, including the production of official information and the secure processing of personal data in educational institutions. This article analyzes a questionnaire that explored the changes brought about by the EU Data Protection Regulation on the University of Applied Sciences. The survey was conducted in the spring of 2019 at four Finnish universities of Applied Sciences. People from different personnel groups responded to the survey. The responses were analyzed from the perspective of change management. The replies revealed how staff received information about the regulations, how the organization informed the changes, and whether the changes affected their wor
