PassEveryTest
Polski

GDPR for Employees Course (EU) 2026

This course is for employees in the EU who handle personal data about customers, patients, pupils or colleagues. It covers what personal data is, the GDPR principles and lawful bases, people's rights, everyday safeguards and what to do about a data breach. Each topic has a lesson and an untimed quiz, followed by a timed 30-question final assessment; score 80% or more to earn a Certificate of Completion.

  • Kurs
  • Unia Europejska
  • Pytania: 100
  • Sprawdzono 13 października 2026
  • Fakty sprawdzone 13 października 2026

W skrócie

Ten bezpłatny kurs obejmuje około 150 minut lekcji, quizy tematyczne bez limitu czasu (liczba: 6, łącznie 100 pytań) oraz końcowy test na czas z 30 losowo wybranymi pytaniami. Uzyskaj co najmniej 80% w teście końcowym, aby pobrać zaświadczenie o ukończeniu (prywatne, nieakredytowane). Sprawdzono z oficjalnymi źródłami 13 października 2026.

Zacznij od lekcjiGDPR for Employees Course (EU): Lessons: ok. 150 min czytania. Każde pytanie testowe jest omówione w lekcjach.

Czego się nauczysz

  • Recognise personal data and the special categories that need extra protection
  • Explain the GDPR principles and apply them to everyday tasks
  • Describe the six lawful bases and when consent is valid
  • Recognise requests from people using their data protection rights and pass them on quickly
  • Protect personal data on your desk, screen, devices and in emails
  • Spot a personal data breach and report it internally at once

Uzyskaj co najmniej 80%, aby pobrać certyfikat.

Twój plan nauki

Przeczytaj każdą lekcję, rozwiąż quiz tematyczny (bez limitu czasu, z wyjaśnieniami), a potem końcowy test na czas. Za każdym razem losowany jest nowy zestaw pytań. Postęp zapisuje się w tej przeglądarce.

  1. Przeczytaj lekcjeLekcje: 6, około 150 min
  2. Quiz tematyczny 1: What personal data isPytania: 16
  3. Quiz tematyczny 2: The data protection principlesPytania: 16
  4. Quiz tematyczny 3: Lawful bases and consentPytania: 16
  5. Quiz tematyczny 4: Data subject rightsPytania: 17
  6. Quiz tematyczny 5: Everyday safeguards at workPytania: 17
  7. Quiz tematyczny 6: Personal data breachesPytania: 18
  8. Egzamin końcowyPytania: 30, 35 min · Co najmniej 80%

Quiz tematyczny 1: What personal data is

  1. Pytanie 1 z 16

    What does the abbreviation GDPR stand for?
    Pokaż odpowiedź

    Odpowiedź: A. General Data Protection Regulation

    GDPR is the General Data Protection Regulation, Regulation (EU) 2016/679.

  2. Pytanie 2 z 16

    Since which date has the GDPR applied across the EU?
    Pokaż odpowiedź

    Odpowiedź: A. 25 May 2018

    The GDPR entered into force on 24 May 2016 and has applied since 25 May 2018.

  3. Pytanie 3 z 16

    Under the GDPR, personal data is information that relates to whom?
    Pokaż odpowiedź

    Odpowiedź: D. An identified or identifiable living person

    Personal data is any information relating to an identified or identifiable living individual, called the data subject.

  4. Pytanie 4 z 16

    Which of these is personal data?
    Pokaż odpowiedź

    Odpowiedź: C. The work email marta.novak@example.com

    An email address that points to one person is personal data. Company numbers, generic company addresses and irreversibly anonymised data are not.

  5. Pytanie 5 z 16

    What is the person that personal data is about called?
    Pokaż odpowiedź

    Odpowiedź: D. The data subject

    Article 4(1) GDPR calls the identified or identifiable person the data subject.

  6. Pytanie 6 z 16

    Which of these belongs to the special categories of personal data?
    Pokaż odpowiedź

    Odpowiedź: C. Data about a person's health

    Health data is one of the special categories in Article 9 GDPR, which need extra protection.

  7. Pytanie 7 z 16

    Which statement best describes "processing" under the GDPR?
    Pokaż odpowiedź

    Odpowiedź: C. Any operation on personal data, from collecting and viewing it to deleting it

    Article 4(2) GDPR defines processing very widely, from collection and consultation to disclosure, erasure and destruction.

  8. Pytanie 8 z 16

    In a staff survey, names are replaced with codes and the list linking codes to names is kept separately. What is the survey data now?
    Pokaż odpowiedź

    Odpowiedź: D. Still personal data, as it can be linked back to people

    Pseudonymised data can be used to re-identify people, so it remains personal data under the GDPR.

  9. Pytanie 9 z 16

    When does information stop being personal data?
    Pokaż odpowiedź

    Odpowiedź: D. When it is anonymised so that nobody can ever be identified again

    Only data anonymised so that no one can be identified, irreversibly, falls outside the GDPR. Encrypted and pseudonymised data are still personal data.

  10. Pytanie 10 z 16

    What is the organisation that decides why and how personal data is processed called?
    Pokaż odpowiedź

    Odpowiedź: D. The controller

    Article 4(7) GDPR: the controller determines the purposes and means of the processing.

  11. Pytanie 11 z 16

    A company uses an outside payroll provider, which pays staff on the company's instructions. What is the payroll provider usually?
    Pokaż odpowiedź

    Odpowiedź: A. A processor

    A processor processes personal data on behalf of the controller. The EDPB gives a payroll company as an example.

  12. Pytanie 12 z 16

    Who enforces the GDPR in each EU country?
    Pokaż odpowiedź

    Odpowiedź: A. An independent national data protection authority

    Each EEA country has its own independent data protection authority, which handles complaints, investigates and can impose sanctions.

  13. Pytanie 13 z 16

    Pavel keeps an address book of his friends' birthdays at home, just for himself. Does the GDPR apply to it?
    Pokaż odpowiedź

    Odpowiedź: A. No, purely personal or household activities are outside it

    Article 2(2)(c) GDPR excludes processing by a person in a purely personal or household activity. Data you handle at work is not covered by this exception.

  14. Pytanie 14 z 16

    According to the GDPR recitals, which can set more specific rules on processing employees' personal data?
    Pokaż odpowiedź

    Odpowiedź: B. National law or collective agreements, such as works agreements

    Recital 155 says Member State law or collective agreements, including works agreements, may set specific rules for employee data. National rules therefore differ.

  15. Pytanie 15 z 16

    Read the description. What kind of data is in column D?

    Clara works at the front desk of Northfield Clinic. Her manager asks her to tidy up a spreadsheet called "visits.xlsx". It has these columns:

    Column A: patient code (for example P-1047)
    Column B: first name
    Column C: date of visit
    Column D: reason for visit (for example "asthma check")
    Column E: email address (for example j.doe@example.com)

    Pokaż odpowiedź

    Odpowiedź: B. Special category data, because it concerns health

    The reason for a clinic visit, such as an asthma check, is data concerning health, a special category under Article 9 GDPR.

  16. Pytanie 16 z 16

    Read the description. Clara suggests deleting column B so the file is "anonymous". Is she right?

    Clara works at the front desk of Northfield Clinic. Her manager asks her to tidy up a spreadsheet called "visits.xlsx". It has these columns:

    Column A: patient code (for example P-1047)
    Column B: first name
    Column C: date of visit
    Column D: reason for visit (for example "asthma check")
    Column E: email address (for example j.doe@example.com)

    Pokaż odpowiedź

    Odpowiedź: D. No, the codes and email addresses still identify people

    Data is only anonymous if no one can be identified. Codes that link to patient records and email addresses still identify people, so it stays personal data.

Co warto wiedzieć przed egzaminem

  • The GDPR, Regulation (EU) 2016/679, has applied since 25 May 2018 and also applies across the European Economic Area.
  • Personal data is any information relating to an identified or identifiable living person; pseudonymised data is still personal data.
  • Processing is lawful only if at least one of the six lawful bases in Article 6(1) GDPR applies.
  • Organisations must respond to rights requests within one month of receipt, extendable by two further months for complex or numerous requests.
  • Controllers must notify the data protection authority of a personal data breach, where feasible, within 72 hours of becoming aware of it, unless it is unlikely to result in a risk to people.
  • Fines can reach €20 million or 4% of worldwide annual turnover, whichever is higher.
  • National law or collective agreements may set more specific rules on processing employees' personal data.

Najczęściej zadawane pytania

Is this an official GDPR certification?

No. When you pass the final assessment you get a PassEveryTest Certificate of Completion, which shows you finished this general awareness course. It is not an accredited qualification or a legally required training certificate, and it does not replace the data protection training your employer gives you.

How does the final assessment work?

It has 30 questions drawn at random from the course question bank, with a 35-minute time limit. You need 80% to pass, and each attempt gives you a new mix of questions.

Are the rules the same in every EU country?

The GDPR applies directly in every EU country, but some details are set nationally, such as specific rules on employee data and the age at which children can consent online. Each country has its own data protection authority.

What should I do if I sent personal data to the wrong person?

Report it internally straight away, following your organisation's procedure. Your employer may have only 72 hours to notify the data protection authority, so do not wait.

Does my employer need my consent to process my data?

Usually not. Employers normally rely on other lawful bases, such as the employment contract or a legal obligation, because staff may not feel free to refuse consent.

Czy zaświadczenie jest akredytowane lub oficjalnie uznawane?

Nie. To prywatne zaświadczenie o ukończeniu, wyłącznie dla Twojej wiedzy. Nie jest uznawane, akredytowane ani zatwierdzone przez żaden rząd, organ licencyjny, regulatora ani instytucję edukacyjną i nie zastępuje żadnej licencji, certyfikacji ani szkolenia wymaganych przez prawo.

Źródła