Free data protection course test: 25 questions and certificate

Final test: 25 questions

Answer all 25 questions. You pass with 20 or more correct (80%). When it is marked you will see the explanation and the rule behind each answer. You can retake it as many times as you like.

1. What is personal data under the GDPR?Only the ID numberOnly bank detailsAny information about an identified or identifiable natural personAny data about a company

2. Is viewing a customer's record on screen processing data?No, only if printedYes: consultation is a form of processingNo, only if sentOnly if erased

3. Who is normally the «controller» of customers' data?Each workerThe customerThe Data Protection AgencyThe employer, which decides why and how it is processed

4. The payroll firm that prepares payslips on the employer's behalf is…A processorA controllerA data subjectA supervisory authority

5. What does the data minimisation principle require?Deleting all data every dayProcessing data of few peopleProcessing only the data needed for the purposeUsing small print

6. Using delivery customers' phone numbers to send them advertising breaches the principle of…AccuracyPurpose limitationPrice transparencyNone

7. How long can data be kept?No longer than necessary for the purposes of processingForeverExactly ten yearsOne day

8. What does «accountability» mean?That the worker pays the finesThat nothing is needed until there is a complaintThat the AEPD complies for the companyThat the controller must comply and be able to demonstrate compliance

9. Which of these is special category data?Work emailTrade union membershipEmployee numberWorking hours

10. Can health data ever be processed at work?NeverAlways, without limitsYes, in the cases of article 9.2, such as employment and social security law obligationsOnly if the worker publishes it

11. How long does your duty of confidentiality over the data you see at work last?Until the end of the shiftUntil you sign the settlementOne yearIt continues even after your relationship with the employer ends

12. How may a worker with access to data process it?However they see fitAs the customer asksOnly on the controller's instructionsAs a colleague wants

13. Sending an email with customer data to the wrong person by mistake is…A personal data breachNothing, if accidentalJust a spelling mistakeA right of access

14. Within what time must the controller notify a breach to the authority, where feasible?Within a yearWithin 72 hours of becoming aware of itNeverWithin 30 days

15. You lose a USB stick with patient data. What do you do?Wait and see if it turns upSay nothingBuy an identical oneReport it at once through the employer's channel, because the deadline runs from when it is known

16. May the employer check the work email it gives you?NeverYes, to monitor compliance with your obligations and security, under usage rules it must tell you aboutAlways, with no rulesOnly with a court order

17. What is the right to digital disconnection?The right to have your rest respected outside working timeThe right not to use a computerThe right to switch off the office wifiPaid leave

18. Where can there never be cameras or sound recording at work?At the entranceIn the warehouseIn changing rooms, toilets, canteens and rest areasAt the till

19. Before using cameras to monitor workers, the employer must…Inform them beforehand, expressly, clearly and conciselyDo nothingAsk each customer for permissionHide them

20. And before using GPS in a work vehicle?Nothing, the car belongs to the companyInform beforehand, expressly, clearly and unequivocally, of its existence and featuresAsk the traffic authorityTell them only if there is an accident

21. As a rule, how long can CCTV footage be kept?Five yearsForeverOne month at mostExactly one week

22. Which article of the Workers' Statute recognises your digital rights?Article 1Article 38NoneArticle 20 bis

23. You ask your employer what data it holds about you. Which right are you exercising?The right to strikeThe right of accessThe right to object to payrollNone

24. Within what time must the employer reply?Within one month, extendable by two more if complexWithin a yearWhenever it canWithin 24 hours

25. Who can you complain to if you think your data is mishandled?The traffic authorityThe tax officeThe Spanish Data Protection AgencyNobody

Your PDF training certificate

Unlocked when you pass the test (20 out of 25).

This is a free-format theory training certificate. It is not a data protection officer certification and does not replace the instructions and training your employer gives you on its own processing.

Next step: your computer workstation

If you work with data, you work at a screen. The display screen and telework course explains the chair, the lighting, breaks and remote work rights, with Royal Decree 488/1997 and Law 10/2021.

Free course: Display screens and telework8 modules · 30 questions

More free courses with a certificate

Final test: Data protection

Final test: 25 questions

Your PDF training certificate

Next step: your computer workstation

More free courses with a certificate

Bienvenido