Denmark — AI Regulations

02 MAR 2026 · Law / Act

Bill amending the Copyright Act (Introduction of performance protection and protection against digitally generated imitations, etc.) (2025/0654/DK)

On 3 February 2026, the European Commission issued an opinion under Article 5(2) of Directive (EU) 2015/1535 regarding Denmark’s notified draft Act amending the Copyright Act (Introduction of performance protection and protection against digitally generated imitations, etc.) (Notification 2025/0654/DK). The draft Act introduces two new forms of copyright protection. The first is a general right under Section 73a against the making available to the public of realistic digitally generated imita...

Intellectual Propertytechnical-regulation-information-system.ec.europa.eu ↗

26 JUN 2025 · Law / Act

Bill amending Copyright Act prohibiting unauthorised sharing of digitally generated imitations of personal characteristics

On 26 June 2025, the Danish Ministry of Culture announced a proposal to amend the Copyright Act prohibiting unauthorised sharing of realistic, digitally generated imitations of personal characteristics. The proposal applies to creators, distributors, and hosting platforms involved in sharing manipulated content that falsely depicts individuals or artists. It introduces two key protections, a general ban on sharing digital imitations of personal traits, including appearance and voice, without ...

Intellectual Propertykum.dk ↗

23 JAN 2025 · Other

Danish Data Protection Agency's guidelines on secure transmissions

On 23 January 2025, the Danish Data Protection Authority (DPA) published guidance on secure transmission with validated sender, receiver, and content in line with Article 32 of the General Data Protection Regulation (GDPR). The guidance outlines how this approach ensures both the protection and verification of data during transmission. Alongside encryption, the measures aim to prevent data from being sent to unintended recipients and to maintain the integrity of messages during transfer. The ...

✓ ✓ OfficialNational Strategydatatilsynet.dk ↗

17 JAN 2025 · Other

Data Protection Authority investigation into Berlingske's use of cookie walls over alleged non-compliance with data protection regulations

On 17 January 2025, the Danish Data Protection Authority (Datatilsynet) issued a ruling on Berlingske’s compliance with its order regarding the use of a cookie wall on berlingske.dk. In February 2024, the Authority had found Berlingske’s method of obtaining consent for personal data processing through a cookie wall to be non-compliant with General Data Protection Regulation (GDPR) consent requirements. It was highlighted that users were not offered a genuine choice to access content without g...

✓ ✓ OfficialNational Strategydatatilsynet.dk ↗

26 NOV 2024 · Other

Data Protection Authority guidance on enhanced security breach response

On 26 November 2024, the Danish Data Protection Authority announced an update in its guidance efforts for organisations affected by breaches of personal data security. This initiative, building on a year of targeted guidance, aims to provide quicker and more relevant assistance to prevent repeat incidents. The authority has refined its approach based on the analysis of 54,681 reviews, ensuring that organizations reporting breaches through the Danish Business Authority's online form receive ef...

✓ ✓ OfficialNational Strategydatatilsynet.dk ↗

26 NOV 2024 · Law / Act

Citizens' proposal to ban TikTok, Snapchat, and Instagram for minors

On 26 November 2024, a citizens' proposal called “Ban TikTok, Snapchat, and Instagram for minors: Protect Danish children and youth from harmful, addictive digital stimuli” reached the required support of 50’000 citizens and was introduced to the Danish Parliament. The proposal would restrict access to certain social media platforms for minors. The resolution will undergo the standard parliamentary process, including initial and final debates, committee review, and potentially a vote.

Content Moderationft.dk ↗

28 OCT 2024 · Other

Data Protection Agency investigation into Booligal ApS data processing practices

On 28 October 2024, the Danish Data Protection Agency (DPA) concluded its investigation into Boliglag ApS, determining that the company had engaged in the illicit processing of homeowner data on its website. The investigation, which commenced in March 2024, was initiated in response to complaints regarding the website's functionality that permitted users to search for property information using a homeowner's name or address. This resulted in the exposure of personal details, including names, ...

National Strategydatatilsynet.dk ↗

09 OCT 2024 · Other

Guide on Controlled and Monitored Disclosure of Data

On 10 September 2024, the Danish Data Protection Agency (Datatilsynet) adopted a new Guide aimed at preventing unintended disclosure of personal data during the public release of materials. In particular, the Guide provides preventive actions to help organisations avoid mistakenly sharing personal data, as well as corrective steps to identify already disclosed personal data and take corrective measures. Specifically, it emphasises the importance of removing unnecessary personal data before pu...

✓ ✓ OfficialNational Strategydatatilsynet.dk ↗

07 OCT 2024 · Other

Danish Data Protection Agency's investigation into Google Workspace Usage in Schools

On 10 July 2024, the Danish Data Protection Agency issued an assessment to municipalities regarding the use of Google Workspace in primary and lower secondary schools, confirming that municipalities are compliant with the Agency's January 2024 order and have ceased the unauthorised passing of personal data. KL, representing 52 municipalities, stated that from 1 August 2024, personal data would no longer be shared for Google's purposes, addressing the Agency's concerns. The Agency noted that c...

National Strategydatatilsynet.dk ↗

07 OCT 2024 · Other

Guide on confidentiality in relation to access to party files, case information and publication under the Competition Act

On 10 July 2024, the Danish Competition and Consumer Authority (KFST) published a guide on confidentiality in relation to access to party files, case information, and publication. This guide is aimed at companies involved in cases under the Competition Act and addresses typical confidentiality issues that arise in such contexts. KFST guide was issued to address concerns about data protection due to the presence of confidential information typically found in these cases concerning both the i...

✓ ✓ OfficialNational Strategykfst.dk ↗

04 OCT 2024 · Executive Order

Order designating Danish Agency for Digitisation as AI Supervisory Authority under EU AI Act

On 10 April 2024, the Danish Agency for Digitisation was designated as the national supervisory authority for artificial intelligence (AI) in accordance with the European Union's regulation on artificial intelligence. This designation positions the Agency to oversee the application of artificial intelligence within Denmark, ensuring that AI technologies are used in a manner that is both beneficial and secure for society and businesses. The Agency's responsibilities will include coordinating w...

✓ ✓ OfficialNational Strategydigmin.dk ↗

26 SEP 2024 · Other

Datatilsynet investigation into Dansk Retursystem's app "Pant" for alleged unauthorised processing of sensitive user financial information

On 26 September 2024, the Danish Data Protection Authority (Datatilsynet) issued a decision in an investigation into Dansk Retursystem's mortgage app, 'Pant' for unauthorised processing of sensitive user financial information. The investigation focused on the concerns raised regarding the app's features, such as its ability to track user's locations, access extensive information on devices, and interact with user's banks. The decision mandates that Dansk Retursystem review its data processin...

✓ ✓ OfficialNational Strategydatatilsynet.dk ↗

11 AUG 2024 · Other

Competition and Consumer Authority investigation into Polaris Private Equity proposed acquisition of 7N A/S

On 8 November 2024, the Danish Competition and Consumer Authority (KFST) closed the public consultation regarding the proposed acquisition of sole control over 7N A/S by Polaris Private Equity V K/S. 7N A/S operates as a broker of IT consultants and provider of IT services across various sectors. The merger, according to the parties involved, falls under the merger control provisions of the Competition Act, necessitating approval before proceeding. The Authority will decide if the merger qual...

Competitionkfst.dk ↗

02 AUG 2024 · Other

Denmark Digital Development Strategy

On 8 February 2024, the Danish Government announced that a political agreement was reached concerning the "Digital Development Strategy", which includes a program to increase minors' online safety. In particular, the plan outlines the goal of including age verification requirements for digital platforms which would be achieved through a technical solution for age verification that does not allow a child to be identifiable.

Content Moderationdigmin.dk ↗

01 AUG 2024 · Other

Agency for Digitalisation's Guide on Responsible Use of Generative AI

On 8 January 2024, the Danish Agency for Digitalisation adopted a guide on the responsible use of generative artificial intelligence (AI). The guide, which addresses the rapid development of generative AI tools since the launch of ChatGPT in October 2022, aims to assist public and private entities in making informed decisions regarding the adoption and implementation of generative AI. It outlines a three-step approach, including deciding on the approach, creating guidelines, and establishing ...

✓ ✓ OfficialNational Strategydigst.dk ↗

06 JUL 2024 · Other

KFST investigation into Temu over alleged violations of the EU's DSA regulation

On 7 June 2024, the Danish Competition and Consumer Authority (KFST) announced an investigation into Temu over alleged violations of the EU's Digital Services Act (DSA). In particular, the KFST announced that it had forwarded a case concerning the online platform Temu to the European Commission and the Irish DSA supervisory authority after initial investigations suggested potential violations of the DSA obligations. The investigation was opened following complaints from the Danish Consumer Co...

Content Moderationkfst.dk ↗

02 JUL 2024 · Other

Danish Data Protection Agency position on language technology development

On 7 February 2024, the Danish Data Protection Agency published two opinions about the lawful sharing and publication of datasets used for the development of Artificial Intelligence (AI) and language models. Regarding the publication of a dataset used for the development of an AI model, the Agency stated that the data must be lawfully collected and processed. In particular, the principles of minimisation, accuracy, and legality must be complied with. Further, in the case of the data being pro...

✓ ✓ OfficialNational Strategydatatilsynet.dk ↗

27 JUN 2024 · Other

Datatilsynet Investigation into IDA Forsikring regarding use of AI to analyse recorded conversations

On 27 June 2024, the Danish Data Protection Authority (Datatilsynet) issued a ruling in its investigation into insurance company IDA Forsikring regarding their use of artificial intelligence to analyse recordings of customer service telephone conversations. Datatilsynet found that the recording an analysis of such phone calls was permissible in principle, but that the current process for obtaining consent did not meet prerequisites set by data protection rules.

✓ ✓ OfficialNational Strategydatatilsynet.dk ↗

31 MAY 2024 · Other

Competition and Consumer Authority investigation into Meta regarding the use of TV hosts in fake ads

On 31 May 2024, the Danish Competition and Consumer Authority (KFST) forwarded a case involving fake ads using TV hosts on Facebook and Instagram to the European Commission and Irish Digital Services Coordinator and lead competent authority for the Digital Services Act, the Media Commission. The ads, which falsely use TV hosts to promote investments, may violate the Digital Services Act DSA, according to KFST. Meta, the company behind these platforms, is required to limit illegal content. The...

Content Moderationkfst.dk ↗

23 MAY 2024 · Other

Datatilsynet Investigation into Netcompany's Alleged Failure to Implement Security Measures

On 23 May 2024, the Norwegian Data Protection Authority (Datatilsynet) concluded its investigation into Netcompany's alleged failure to implement security measures. Datatilsynet had posed several inquiries to Netcompany at the end of February to determine if the situation fell under the scope of General Data Protection Regulation (GDPR) and other pertinent data protection regulations. After reviewing Netcompany's responses, Datatilsynet determined that there is currently no grounds for furthe...

✓ ✓ OfficialNational Strategydatatilsynet.dk ↗

22 MAY 2024 · Other

Data Protection Authority 's Generic Impact Assessment Template

Official source record dated 2024-05-22 for Denmark concerning Data Protection Authority 's Generic Impact Assessment Template. See the linked datatilsynet.dk source for the authoritative text, procedural context, and implementation details.

✓ ✓ OfficialNational Strategydatatilsynet.dk ↗

03 MAY 2024 · Other

Regulatory Sandbox for AI by Danish Data Protection Authority

On 5 March 2024, the Danish Data Protection Authority, in collaboration with the Danish Agency for Digitalisation, announced the establishment of a regulatory sandbox for Artificial Intelligence (AI). The sandbox aims to provide companies and authorities with free access to relevant expertise and guidance on the applicable legal framework, with an initial focus on the General Data Protection Regulation (GDPR). The sandbox process is expected to support innovation and the use of responsible AI...

National Strategydatatilsynet.dk ↗

29 APR 2024 · Other

Data Protection Authority investigation into Telmore A/S and Meta Ireland's Data Sharing Practices

On 29 April 2024, the Danish Data Protection Authority (DPA) concluded its investigation into Telmore A/S for disclosing a citizen's email address to Meta Ireland for the purpose of targeted marketing. The investigation found that Telmore A/S and Meta Ireland were joint data controllers in this context, contrary to Telmore's assertion that Meta Ireland acted merely as a data processor. The DPA ruled that the data-sharing practice could not be justified under the balancing of interests rule an...

✓ ✓ OfficialNational Strategydatatilsynet.dk ↗

07 APR 2024 · Other

Data Protection Authority guidelines on handling personal data security breaches

On 4 July 2024, the Danish data protection authority (Datatilsynet) adopted its updated and expanded guidelines on handling personal data security breaches, incorporating several examples based on current practices and providing detailed instructions for organisations. The guidelines define breaches as incidents leading to accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access to personal data. Examples include stolen media, hacker access, and ransomware atta...

✓ ✓ OfficialNational Strategydatatilsynet.dk ↗

06 APR 2024 · Other

Data Protection Authority guidelines on security testing of software

On 4 June 2024, the Danish Data Protection Authority (DPA) adopted guidelines on security testing of software to identify vulnerabilities in newly developed software. The guidelines aim to provide practical guidance in implementing the General Data Protection Regulation (GDPR)'s requirement for an appropriate level of security. The guidelines provide information related to testing, including vulnerability and penetration testing, to establish technical minimum requirements that are compliant ...

✓ ✓ OfficialNational Strategydatatilsynet.dk ↗

03 APR 2024 · Executive Order

Amendment to the Danish Data Protection Authority's Standard Data Processing Agreement

On 4 March 2024, the Danish Data Protection Authority made two changes to its standard data processing agreement. The amendments pertain to the provision that includes the data controller as a beneficiary third party in the event of the data processor's bankruptcy. The new amended version clarifies that this provision is optional for the data controller and data processor to include in the data processor agreement. Additionally, the wording of the provision has been aligned with the correspon...

✓ ✓ OfficialNational Strategydatatilsynet.dk ↗

25 MAR 2024 · Other

Datatilsynet investigation into GulogGratis' use of cookie walls

On 25 March 2024, the Danish Data Protection Authority (Datatilsynet) rejected GulogGratis' request to reopen its case on the use of cookie walls, which required users to either pay or consent to cookie tracking.The DPA had found the usage to be lawful but required GulogGratis to demonstrate that its personal data processing for statistical purposes was lawful and in line with GDPR requirements on voluntary consent. The DPA's ruling found that GulogGratis had not demonstrated that the process...

✓ ✓ OfficialNational Strategydatatilsynet.dk ↗

29 FEB 2024 · Other

Government expert group inquiry into large technological companies' use and development of artificial intelligence

On 29 February 2024, the Danish government's expert group on large technology companies presented a series of recommendations for the development and use of artificial intelligence (AI). The recommendations aim to use the potential of AI for economic growth, welfare, public services, and societal challenges while also addressing the risks associated with its misuse. The proposed framework focuses on four themes, large technology companies' responsibility for information credibility on their ...

✓ ✓ OfficialNational Strategyem.dk ↗

17 FEB 2024 · Law / Act

Act No. 1765 implementing the Digital Service Act into Danish Law designating competent authorities and digital services coordinator

On 17 February 2024, Act No. 1765 on enforcement of Regulation (EU) 2022/2065 on a Single Market for Digital Services (Digital Services Act) entered into force in Denmark. The Act enforces and supplements Regulation (EU) 2022/2065 of 19 October 2022, which establishes an internal market for digital services and amends Directive 2000/31/EC. The Act applies where Denmark holds supervisory and enforcement competence under the Digital Services Act (DSA). The Act also applies to the natural and le...

✓ ✓ OfficialContent Moderationretsinformation.dk ↗

05 FEB 2024 · Other

Investigation into Rejsekort App by Danish Data Protection Authority

On 2 May 2024, the Danish Data Protection Authority announced it is considering whether to initiate a detailed investigation into the Rejsekort app, which provides tickets to Denmark's public transport system, following preliminary inquiries. The authority has requested information from Rejsekort & Rejseplan about the app's functionality and the nature of personal data processed, including location data of users. This step comes before deciding whether to initiate a formal supervisory case.

National Strategydatatilsynet.dk ↗

05 JAN 2024 · Other

Japan-Denmark Memorandum of Cooperation on Safe AI

On 1 May 2024, the Ministry of Internal Affairs and Communications of Japan and the Ministry of Digital Government and Gender Equality of the Kingdom of Denmark signed a Memorandum of Cooperation (MOC). The agreement aims to increase cooperation in the digital field, particularly in the development of machine learning and artificial intelligence (AI), in accordance with the domestic laws and regulations of both countries. The MOC outlines areas of collaboration, including the promotion of saf...

✓ ✓ OfficialNational Strategysoumu.go.jp ↗

06 DEC 2023 · Law / Act

Limits on the collection and processing of children's data in Bill regulating large digital platforms

On 12 June, the Danish Ministry of Business announced that it will introduce a Bill regulating large digital platforms, including limits on collecting and processing children's data, following the recommendations from the government's tech expert group. The Bill would apply to all information society services to ensure child protection in the context of the General Data Protection Regulation by limiting the ability to collect personal data. The expert group recommends raising the age limit fr...

National Strategyem.dk ↗

06 DEC 2023 · Law / Act

Age verification requirements in Bill regulating large digital platforms

On 12 June, the Danish Ministry of Business announced that it will introduce a Bill regulating large digital platforms including age verification requirements, following the recommendations from the government's tech expert group. The Bill aims to safeguard minors from exposure to inappropriate content, including materials related to warfare or pornography. Specifically, the Bill would require digitally confirming adulthood in order to access websites or download applications containing unsui...

Consumer Protectionem.dk ↗

06 DEC 2023 · Other

Data protection regulation in Ministry of Business expert group report on democratic control of large technology companies' business models

On 12 June 2023, the Ministry of Business of Denmark expert group published the Report on democratic control of large technology companies' business models including recommendations for data protection regulations. First, the expert group recommends establishing requirements that enable users to access and use the platform's services without providing data for profiling and tracking purposes. The requirement should apply regardless of whether access is through an app, browser, or any other me...

✓ ✓ OfficialNational Strategyem.dk ↗

28 NOV 2023 · Other

Datatilsynet Guidelines on Security Measures

On 28 November 2023, the Danish Data Protection Authority (Datatilsynet) adopted guidelines in the form of a Catalogue of Security Measures, introducing tools intended to support companies and authorities in implementing appropriate security measures in various contexts. The catalogue includes a range of technical and organisational measures, with a focus on future guidelines for rights management. Furthermore, the catalogue is intended to provide a specific and applicable tool for meeting th...

✓ ✓ OfficialNational Strategydatatilsynet.dk ↗

13 JUL 2023 · Other

Danish Data Protection Authority Guidance for the removal of information from search engines

On 13 July 2023, the Danish Data Protection Authority (Datatilsynet) published guidance for data subjects to request search engines such as Google and Bing to remove search results associated with their name. The guidance explains the exercise of the right to have information deleted under the data protection framework and how to contact the search engine to submit a request to delete information. Further, the guidance specifies that data subjects have the right to submit a complaint to Datat...

✓ ✓ OfficialNational Strategydatatilsynet.dk ↗

11 JUN 2023 · Other

Danish Digital Agency investigation into Google on the use of cookies

On 6 November 2023, the Danish Digital Agency issued a ruling against Google concerning their use of cookies and similar technologies on their websites. Google is mandated to modify the consent solution, allowing users to separate their consent based on overall purposes. Additionally, Google must provide users with immediate access to revoke their consent for cookies and similar technologies, ensuring clarity in conveying this accessibility. The user's ability to withdraw consent and correspo...

✓ ✓ OfficialNational Strategydigst.dk ↗

20 APR 2023 · Other

Data Protection Authority investigation into Boligportal compliance with GDPR

On 20 April 2023, the Danish Data Protection Authority issued its ruling in the case against the house rental platform Boligportal. After having received complaints about Boligportal's data processing with the help of Facebook Business tools, which collect information about any person visiting the website, the Authority started an investigation. The Authority stated that it was unable to decide whether personal data was transferred to the US in the context of Boligportal's use of Facebook Bus...

✓ ✓ OfficialNational Strategydatatilsynet.dk ↗

20 JAN 2023 · Other

Guidelines on consent in the storage of personal data

On 20 January 2023, the Danish Data Protection Authority issued guidelines on the storage of personal data. The guidelines were aimed at clarifying regulations for documentation requirements for data collectors in seeking data subjects’ consent for the storage of personal data under Article 7 of the Danish Data Protection Regulation. The guidelines state that the condition for consent, according to Article 8, applies only as long as data processing is ongoing for the purpose that the data sub...

✓ ✓ OfficialNational Strategydatatilsynet.dk ↗

01 JAN 2023 · Executive Order

Amendment of Executive Order on Data Deletion Requirements in Research

On 1 January 2023, an Amendment of the Executive Order no. 1509 of 18 December 2019 on the disclosure of personal data based on the Data Protection Act was implemented. The amendment updates the rules governing the management of data used for scientific or statistical purposes after the expiry of such purposes, including possible methods for deidentification or archiving.

✓ ✓ OfficialNational Strategyretsinformation.dk ↗