What does a worker need to know about data protection? That the data of customers, patients or colleagues seen at work may only be processed following the employer's instructions and under a duty of confidentiality that continues after leaving the job (Organic Law 3/2018, article 5; GDPR, article 29). And that workers have rights too: the employer cannot put cameras in changing rooms or toilets and must inform beforehand before using cameras or GPS for monitoring (articles 89 and 90). This course explains it in 7 modules, with a 25-question test and a training certificate in PDF. It is not data protection officer training.
Note: this is theory only and not an approved course. It is not data protection officer training and does not replace your employer's instructions on how it processes its data.
- StudyThe 7 modules, at your own pace.
- Take the test25 questions; you can retake it.
- Download the PDFWith your name, the date, the syllabus and a code to check it.
The course: 7 modules
Each module has its own page: the text, a practical example, the rule it comes from and a few review questions. Your progress is saved in this browser.
- 1What personal data is and what processing meansPersonal data is any information about an identified or identifiable person: their name, ID number, phone number…15 min
- 2The principles: purpose, only what is needed, only as long as neededArticle 5 of the GDPR sets the rules every processing operation must follow.20 min
- 3Special data: health, trade union, originSome data is so sensitive that processing it is, in principle, prohibited (GDPR, article 9.1): Racial or ethnic origin…15 min
- 4Your duty: confidentiality and instructionsEveryone involved in any stage of processing is bound by a duty of confidentiality, and this duty continues even after…20 min
- 5Data breaches: what they are and what to doA personal data breach is any incident that destroys, loses or alters data, or lets an unauthorised person see or…15 min
- 6Your digital rights at workThe employer may monitor that you meet your obligations, always respecting your dignity (Workers' Statute, article…20 min
- 7Your rights over your data and where to complainLike anyone, you are also a data subject: your employer processes your payroll, contract and clock-in data.15 min
- ✓Final test and certificateFinal test: 25 questions
Frequently asked questions
Are the course and certificate really free?
Is it an official or accredited certificate?
Does it qualify me as a data protection officer?
Does it replace my employer's instructions?
Can I be dismissed for something a camera records?
Do you store my name or ID number?
Check a certificate
For employers: type the details exactly as they appear on the certificate. Your browser checks that the code matches that name, ID number and date. LaborIA stores no data, so this confirms the certificate has not been altered, not who took the test.
More free courses with a certificate
Rules and official sources
- Regulation (EU) 2016/679, General Data Protection Regulation (GDPR)
- Ley Orgánica 3/2018, de Protección de Datos Personales y garantía de los derechos digitales (Spanish data protection act, in Spanish)
- Real Decreto Legislativo 2/2015, Estatuto de los Trabajadores (Workers' Statute, in Spanish)
Texts read on 24 October 2026. General information: your employer must also give you the training for your specific job.