GDPR provides workers with a variety of rights with respect to their data, including right of access, right to rectification, and rights regarding automated decision-making. Additionally, Art. 40 of the GDPR establishes the possibility for groups of controllers to develop codes of conduct that clarify the application of GDPR to their particular sectors. This paper details the application of GDPR to labor platforms, provides draft text for an Art. 40 code of conduct for labor platforms, and discusses how such a code could help address procedural problems encountered by platform workers.