In this sub-module, small and medium-sized enterprises (users) user will be able to learn and understand the main terminology of the General Data Protection Regulation (GDPR): what is the protection of personal data; what is the role of the supervisory authority; scope of the GDPR; who is the data subject; what are personal data; what are the special categories of personal data; what is the processing of personal data; what is the difference between controllers, processors and joint controllers; what is the objective of the GDPR and data protection regulations, why data protection is important, both for individuals and organizations, etc. After watching the video and after reading the educational materials, the users will be able to fill out the test and answer questions to check their knowledge. The user will be offered statements, in respect of which he/she will be able to state whether he/she considers them correct or incorrect. Once the user gives the answers, an explanation of the correct answer will appear. If the user achieves a minimum of 80 % correct answers, then the system will generate a certificate as proof of successfully passing the theoretical sub-module.