The Spanish Data Protection Agency (AEPD) has released a Guideline called "Data Protection: Guidance for Citizens" (Guide). The Guide contains practical advice to help citizens become aware of their guaranteed rights under Data Protection legislation and how to exercise them. Additionally, it states the obligations with which those controlling and/or processing personal data must comply. The GDPR involves changes in the current legislation. The Guide accordingly contains many references to the new legislation, including the main changes regarding the exercise of rights and detailing which issues can be requested in each situation. The Guide also covers: the rights of access, rectification, cancellation and opposition, the way to exercise them and the legal terms in which the data subject must receive an answer to his or her request. It also includes points related to the rights to be forgotten and to data portability. examples of data processing that can have an impact on the citizens, such as the "credit blacklists", describing the requirements with which these files must comply. information related to other spheres in which any data is processed, such as neighborhoods, videosurveillance or advertising. links to the AEPD website so that any citizen can deepen their understanding of rights and guarantees. a glossary including terms and definitions and a list of online resources can be found.