🇩🇰Data Protection Act

← Back to laws in Denmark

Data Protection Act

Denmark applies this national law alongside the GDPR. The summary below concentrates on the national overlay so that the GDPR baseline is not duplicated.

How the national law fits with GDPR

The Act supplements and implements the GDPR in Denmark and extends selected rules to manual public-authority disclosures, credit bureaux, CCTV and data concerning deceased persons.

National additions and variations

• Section 6 sets 15 as the Article 8 age for consent to directly offered information-society services; below 15, consent must be given or approved by the holder of parental responsibility.
• Section 2 applies the Act and GDPR to data about deceased persons for ten years after death and extends selected rules to company data, credit bureaux and CCTV.
• Sections 7-10 set national grounds and approval conditions for sensitive, criminal, legal-information, scientific and statistical processing, including prior authority approval for specified disclosures.
• Section 11 tightly controls civil registration numbers, and section 12 supplies employment-processing grounds tied to labour-law duties, rights and collective agreements.
• Chapters 4 and 5 impose specific rules on public-debt disclosures and credit-information bureaux; sections 22-23 create national rights and transparency restrictions.

Operational approach

First maintain the GDPR control set. Then document whether this country is in scope and apply the national controls to the affected people, systems and processing. Keep article-level evidence for child consent, employment, special-category or criminal data, research, electronic communications, identifiers, surveillance and any rights restriction relied upon.