Personopplysningsloven (LOV-2018-06-15-38) §1 (gjennomfører personvernforordningen, forordning (EU) 2016/679, GDPR) (Norwegian Working Environment Act) · Updated 2026
+ GDPR art. 5 (prinsipper), art. 6/7/9 (behandlingsgrunnlag), art. 12-22 (rettigheter), art. 24 (ansvar), art. 25 (innebygd personvern), art. 28 (databehandleravtale), art. 30 (protokoll), art. 32 (sikkerhet), art. 33-34 (brudd), art. 37/39 (personvernombud), art. 44-46 (overføring), art. 83 (gebyr); bokføringsloven (LOV-2004-11-19-73) §13; unntatt mva (mval §3-5)
Data protection (GDPR) for ordinary businesses
Learn what GDPR actually requires of your workplace in 60 minutes. Legal bases, data subject rights, information security and breach handling, explained simply and verifiably. Get a numbered certificate the same day.
- Duration
- 60 minutes
- Language
- Norwegian & English
- Kursbevis
- Yes, included
- Price
- NOK 990 per seat
The whole course is free to take. No account needed to start. After you pass the exam you get your certificate through the course.
Certificate · GDPR
HMS-2026-000481
Awarded to
Kari Nordmann
Office employee · Eksempelbedrift AS · Trondheim
Issued
23 April 2026
Exam
96 % (70 % pass mark)
Scan to verify, or visit
hmslederkurs.no/kursbevis/eksempel
Sample certificate. Real format, fictional name. Open the full version.
Free to take
pay NOK 990 when you pass
60 minutes
done in one sitting
1 business day
a human answers your email
Same day
certificate in inbox
How you get it done
Three steps. No classroom, no travel time.
Start for free
Press start and the course opens in your browser. No payment, no account, no install. If you want to pause and continue on another device, you can leave your email along the way. Questions? A human replies by email within 1 business day.
Take the course at your own pace
Seven short lessons cover legal bases and core principles, data subject rights, your duties and internal control, information security in practice, and what to do when something goes wrong. Each lesson ends with a short check, and everything is mobile-friendly so you can take it whenever it suits you.
Pay at the end and get your certificate
Once you pass, you pay and your certificate is issued right away. You choose card or invoice against your org number. A signed, QR-verified PDF is sent to your email the same day, ready to attach to a reply to an order or file in the HR folder.
Data protection in practice, not law for lawyers.
What GDPR and the Personal Data Act actually require of an ordinary Norwegian business, explained in plain language.
See for yourself
What you learn
Get a sense of what the course covers before you start. Each lesson builds on practical examples from an ordinary Norwegian business, with direct references to the Personal Data Act, the GDPR and Datatilsynet's guidance.
- A lovdata link in every module, so you can verify every claim
- Skim-reading is fine, no time gates on pages
- A short knowledge check at the end of every module
6 modules in the course
Each module links directly to lovdata.no and the Data Protection Authority's guidance.
- 01What data protection and GDPR are, and why they apply to your business
- 02Legal basis and the core principles
- 03The rights of the people whose data you hold
- 04Your business's duties: accountability, routines and internal control
- 05Information security and data processors in practice
- 06When things go wrong: incident handling and breaches
Your certificate, same day
The fastest lawful path to an HSE certificate.
You take the course, pass the exam, and have a numbered, QR-verified certificate in your inbox the same day. Ready to show the Data Protection Authority, HR, or an auditor.
Pass it in the same session
You take the exam right after the last lesson, see the result immediately, and can retry free if you fail. No examiner queue, no waiting for post. 70 % pass mark.
Staffed instructor support
An instructor replies to your email within one business day on any question you have along the way. This is also the basis for the VAT exemption under mval § 3-5.
QR-verified in seconds
Every certificate has a unique number (HMS-YYYY-NNNNNN) and a QR code. The Labour Inspection Authority, HR, or an auditor scans and confirms it directly against our register.
Grounded in law, kept current
Every module links directly to lovdata and the Labour Inspection Authority's guidance, so you can verify every claim yourself. Updated whenever the regulations change.
Who wrote this course
The course is developed and maintained in-house by HMS Klar, grounded in current law and regulation and the Data Protection Authority's guidance.
Every lesson links directly to lovdata.no and the Data Protection Authority's guidance, so you can verify every single claim yourself. The content is updated whenever the regulations change. Every certificate is valid documentation in an inspection.
This is what your certificate looks like
Numbered HMS-2026-NNNNNN. QR-verified. Send it to your employer, HR, or the Data Protection Authority. They scan and confirm directly against our register.
Open the example certificatePrice
Start free, pay when you pass
No upfront payment. You pay only after you have taken the course and passed the exam.
NOK990
Free to take. You pay when you pass. No VAT (mval §3-5)
- The whole course and exam are free to take
- Certificate with QR verification, pay only when you pass
- Staffed instructor support within 1 business day
- Free retake if you fail
The whole course is free to take. No account needed to start. After you pass the exam you get your certificate through the course.
Volume discount for companies
Published prices, no negotiation rounds.
- 1 seat
- NOK 990per seat
- 5+ seats
- NOK 790per seat
- 20+ seats
- NOK 590per seat
- 100+ seats
- Contact us
Org-number invoicing for 5+ seats, EHF on request. See team setup →
Frequently asked questions
Is this course a statutory certification?
No. The course is training as part of the business's internal control, as Datatilsynet expects and as GDPR art. 24, 32 and 39(1)(b) envisage. It is not a statutory certification, and the certificate does not replace the duty to designate a data protection officer where GDPR art. 37 requires one.
Does GDPR really apply to my small business?
Almost certainly. If you process names, emails, payroll, personnel files, CVs or supplier contacts, you process personal data, and then GDPR applies. There is no exemption for small businesses. Size only affects how much you must document, not whether the rules apply.
How long does the course take, and do I get a certificate?
The course takes about 60 minutes and is split into seven short lessons you can take at your own pace. Once you pass the final test, you get a numbered, QR-verifiable certificate you can show to management or during an inspection.
What does the course cover?
What data protection and GDPR are and why they apply to your business, the six legal bases and core principles, data subject rights, your duties and internal control, information security and data processing agreements in practice, and how to handle incidents and personal data breaches within the 72-hour deadline.
Putting the whole team through?
Invoice against org number, from NOK 990 per seat at 5+. HR dashboard for progress tracking and bulk certificate downloads.
Background reading
Background reading on what the law requires, before you start.
Is GDPR training mandatory for employees?
No state certificate, but GDPR requires training as part of internal control.
GDPR for small businesses: what's actually required?
Legal basis, records, breach handling and training, without overstating the requirements.
How to document HMS training (with an example certificate)
Field by field: what the certificate must contain, where to file it, and how verification works.
Give your staff the data protection training Datatilsynet expects
Start for free, take the whole course, and pay only once you have passed. If you fail, you can try again at no extra cost.
Updated 2026 · VAT-exempt (mval §3-5) · Lovdata-linked in every topic
Be among the first to take this course
The course just opened. We have no fabricated quotes or stock photos here. When you've finished, we appreciate an honest Trustpilot review, so the next participant knows what they're getting.