{"id":35686,"date":"2025-11-25T14:04:17","date_gmt":"2025-11-25T14:04:17","guid":{"rendered":"https:\/\/grapenordic.com\/gdpr-in-denmark-vs-the-eu\/"},"modified":"2025-12-02T10:34:02","modified_gmt":"2025-12-02T10:34:02","slug":"gdpr-in-denmark-vs-the-eu","status":"publish","type":"post","link":"https:\/\/grapenordic.com\/en\/gdpr-in-denmark-vs-the-eu\/","title":{"rendered":"GDPR in Denmark vs. the EU"},"content":{"rendered":"[vc_row type=&#8221;in_container&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; scene_position=&#8221;center&#8221; top_padding=&#8221;80px&#8221; top_padding_tablet=&#8221;20px&#8221; top_padding_phone=&#8221;0px&#8221; text_color=&#8221;dark&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; overflow=&#8221;visible&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221; gradient_type=&#8221;default&#8221; shape_type=&#8221;&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/6&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][vc_row_inner column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; text_align=&#8221;left&#8221; row_position=&#8221;default&#8221; row_position_tablet=&#8221;inherit&#8221; row_position_phone=&#8221;inherit&#8221; overflow=&#8221;visible&#8221; pointer_events=&#8221;all&#8221;][vc_column_inner column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; overflow=&#8221;visible&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/1&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][\/vc_column_inner][\/vc_row_inner][\/vc_column][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;2\/3&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][vc_column_text css=&#8221;&#8221; text_direction=&#8221;default&#8221;]\n<h1 aria-level=\"1\">GDPR in Denmark vs. the EU GDPR &#8211; here&#8217;s how it works <\/h1>\n<p><b><span data-contrast=\"auto\">In a nutshell:<\/span><\/b><span data-contrast=\"auto\"> The EU GDPR is the basic rules <a href=\"https:\/\/www.retsinformation.dk\/eli\/lta\/2018\/502\">that apply equally throughout the EU\/EEA<\/a>. In Denmark they are supplemented by <\/span><b><span data-contrast=\"auto\">Data Protection Act <\/span><\/b><span data-contrast=\"auto\">which clarifies and fills in certain areas &#8211; e.g. the use of <\/span><b><span data-contrast=\"auto\">CPR numbers<\/span><\/b><span data-contrast=\"auto\"> and the processing of <\/span><b><span data-contrast=\"auto\">information about criminal offenses<\/span><\/b><span data-contrast=\"auto\">. <\/span> <\/p>\n<h2 aria-level=\"2\">What are the &#8220;<span style=\"color: #e96569;\">EU parts<\/span>&#8221; &#8211; what always applies?<\/h2>\n<p><span data-contrast=\"auto\">The common EU set: definitions (personal data, controller\/processor), principles (lawfulness, transparency, data minimization, etc.), the six bases of processing, data subject rights, security requirements, data breaches, etc.<\/span><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"335559738\":240,\"335559739\":240}\"> <\/span><\/p>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"3\" data-list-defn-props=\"{\"335552541\":1,\"335559685\":720,\"335559991\":360,\"469769226\":\"Symbol\",\"469769242\":[8226],\"469777803\":\"left\",\"469777804\":\"\uf0b7\",\"469777815\":\"hybridMultilevel\"}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">Personal data<\/span><\/b><span data-contrast=\"auto\">: any info that can be linked to a person (name, email, IP, position, salary information, etc.).<\/span><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"335559738\":240,\"335559739\":240}\"> <\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"3\" data-list-defn-props=\"{\"335552541\":1,\"335559685\":720,\"335559991\":360,\"469769226\":\"Symbol\",\"469769242\":[8226],\"469777803\":\"left\",\"469777804\":\"\uf0b7\",\"469777815\":\"hybridMultilevel\"}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">Processing: all actions with data (collection, storage, use, sharing, deletion).<\/span><\/b><span data-contrast=\"auto\">: all actions with data (collection, storage, use, sharing, deletion).<\/span><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"335559738\":240,\"335559739\":240}\"> <\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"3\" data-list-defn-props=\"{\"335552541\":1,\"335559685\":720,\"335559991\":360,\"469769226\":\"Symbol\",\"469769242\":[8226],\"469777803\":\"left\",\"469777804\":\"\uf0b7\",\"469777815\":\"hybridMultilevel\"}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">Data Controller \/ Data Processor<\/span><\/b><span data-contrast=\"auto\">: the one who determines the purposes and means vs. the one who processes for the controller.<\/span><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"335559738\":240,\"335559739\":240}\"> <\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"3\" data-list-defn-props=\"{\"335552541\":1,\"335559685\":720,\"335559991\":360,\"469769226\":\"Symbol\",\"469769242\":[8226],\"469777803\":\"left\",\"469777804\":\"\uf0b7\",\"469777815\":\"hybridMultilevel\"}\" data-aria-posinset=\"4\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">Consent<\/span><\/b><span data-contrast=\"auto\">: voluntary, specific, informed and unambiguous yes.<\/span><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"335559738\":240,\"335559739\":240}\"> <\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"3\" data-list-defn-props=\"{\"335552541\":1,\"335559685\":720,\"335559991\":360,\"469769226\":\"Symbol\",\"469769242\":[8226],\"469777803\":\"left\",\"469777804\":\"\uf0b7\",\"469777815\":\"hybridMultilevel\"}\" data-aria-posinset=\"5\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">Personal data breaches<\/span><\/b><span data-contrast=\"auto\">such as <a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/HTML\/?uri=CELEX%3A02016R0679-20160504\">unauthorized access<\/a>, loss or destruction. <\/span> <\/li>\n<\/ul>\n<h3 aria-level=\"3\"><span data-contrast=\"none\">The principles (the backbone of <span style=\"color: #e96569;\">GDPR<\/span>)<\/span><span data-ccp-props=\"{\"134245418\":true,\"134245529\":true,\"335559738\":160,\"335559739\":80}\"> <\/span><\/h3>\n<p><span data-contrast=\"auto\">Treatment must follow seven basic principles:  <\/span><b><span data-contrast=\"auto\">legality, fairness and transparency<\/span><\/b><span data-contrast=\"auto\">,  <\/span><b><span data-contrast=\"auto\">purpose limitation<\/span><\/b><span data-contrast=\"auto\">,  <\/span><b><span data-contrast=\"auto\">data minimization<\/span><\/b><span data-contrast=\"auto\">,  <\/span><b><span data-contrast=\"auto\">correctness<\/span><\/b><span data-contrast=\"auto\">,  <\/span><b><span data-contrast=\"auto\">storage limitation<\/span><\/b><span data-contrast=\"auto\">,  <\/span><b><span data-contrast=\"auto\">Integrity and confidentiality<\/span><\/b><span data-contrast=\"auto\">, and  <\/span><b><span data-contrast=\"auto\">accountability<\/span><\/b><span data-contrast=\"auto\">  (You must be able to prove compliance).  <\/span><\/p>\n<h3 aria-level=\"3\"><span data-contrast=\"none\">Six lawful bases for processing (why are you allowed to process?)<\/span><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"134245418\":true,\"134245529\":true,\"201341983\":0,\"335551550\":1,\"335551620\":1,\"335559685\":0,\"335559737\":0,\"335559738\":160,\"335559739\":80,\"335559740\":279}\"> <\/span><\/h3>\n<ol>\n<li aria-setsize=\"-1\" data-leveltext=\"%1.\" data-font=\"Aptos\" data-listid=\"4\" data-list-defn-props=\"{\"335552541\":0,\"335559685\":720,\"335559991\":360,\"469769242\":[65533,0],\"469777803\":\"left\",\"469777804\":\"%1.\",\"469777815\":\"hybridMultilevel\"}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">Consent<\/span><\/b><span data-contrast=\"auto\"> (a) &#8211; the data subject gives consent for a clear purpose.<\/span><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"335559738\":240,\"335559739\":240}\"> <\/span><\/li>\n<\/ol>\n<ol>\n<li aria-setsize=\"-1\" data-leveltext=\"%1.\" data-font=\"Aptos\" data-listid=\"4\" data-list-defn-props=\"{\"335552541\":0,\"335559685\":720,\"335559991\":360,\"469769242\":[65533,0],\"469777803\":\"left\",\"469777804\":\"%1.\",\"469777815\":\"hybridMultilevel\"}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">Contract<\/span><\/b><span data-contrast=\"auto\"> (b) &#8211; necessary to fulfill\/enter into an agreement (e.g. delivery).<\/span><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"335559738\":240,\"335559739\":240}\"> <\/span><\/li>\n<\/ol>\n<ol>\n<li aria-setsize=\"-1\" data-leveltext=\"%1.\" data-font=\"Aptos\" data-listid=\"4\" data-list-defn-props=\"{\"335552541\":0,\"335559685\":720,\"335559991\":360,\"469769242\":[65533,0],\"469777803\":\"left\",\"469777804\":\"%1.\",\"469777815\":\"hybridMultilevel\"}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">Legal obligation<\/span><\/b><span data-contrast=\"auto\"> (c) &#8211; required by law (e.g. accounting rules).<\/span><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"335559738\":240,\"335559739\":240}\"> <\/span><\/li>\n<\/ol>\n<ol>\n<li aria-setsize=\"-1\" data-leveltext=\"%1.\" data-font=\"Aptos\" data-listid=\"4\" data-list-defn-props=\"{\"335552541\":0,\"335559685\":720,\"335559991\":360,\"469769242\":[65533,0],\"469777803\":\"left\",\"469777804\":\"%1.\",\"469777815\":\"hybridMultilevel\"}\" data-aria-posinset=\"4\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">Vital interests<\/span><\/b><span data-contrast=\"auto\"> (d) &#8211; to protect life\/health.<\/span><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"335559738\":240,\"335559739\":240}\"> <\/span><\/li>\n<\/ol>\n<ol>\n<li aria-setsize=\"-1\" data-leveltext=\"%1.\" data-font=\"Aptos\" data-listid=\"4\" data-list-defn-props=\"{\"335552541\":0,\"335559685\":720,\"335559991\":360,\"469769242\":[65533,0],\"469777803\":\"left\",\"469777804\":\"%1.\",\"469777815\":\"hybridMultilevel\"}\" data-aria-posinset=\"5\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">Community task\/public authority<\/span><\/b><span data-contrast=\"auto\"> (e).<\/span><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"335559738\":240,\"335559739\":240}\"> <\/span><\/li>\n<\/ol>\n<ol>\n<li aria-setsize=\"-1\" data-leveltext=\"%1.\" data-font=\"Aptos\" data-listid=\"4\" data-list-defn-props=\"{\"335552541\":0,\"335559685\":720,\"335559991\":360,\"469769242\":[65533,0],\"469777803\":\"left\",\"469777804\":\"%1.\",\"469777815\":\"hybridMultilevel\"}\" data-aria-posinset=\"6\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">Legitimate interests<\/span><\/b><span data-contrast=\"auto\"> (f) &#8211; your legitimate purposes outweigh the interests of the data subject (requires balancing of interests). <\/span> <\/li>\n<\/ol>\n<h3 aria-level=\"3\"><span data-contrast=\"none\">Rights of the data subject (what people can ask for)<\/span><span data-ccp-props=\"{\"134245418\":true,\"134245529\":true,\"335559738\":160,\"335559739\":80}\"> <\/span><\/h3>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"5\" data-list-defn-props=\"{\"335552541\":1,\"335559685\":720,\"335559991\":360,\"469769226\":\"Symbol\",\"469769242\":[8226],\"469777803\":\"left\",\"469777804\":\"\uf0b7\",\"469777815\":\"hybridMultilevel\"}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">Insight (Art. 15)<\/span><\/b><span data-contrast=\"auto\"> &#8211; <\/span><i><span data-contrast=\"auto\">&#8220;Show me what information you have about me.&#8221;<\/span><\/i><br \/>\n<i><span data-contrast=\"auto\">Example:<\/span><\/i><span data-contrast=\"auto\"> &#8220;Send me a copy of my data from your customer system.&#8221;<\/span><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"335559738\":240,\"335559739\":240}\"> <\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"5\" data-list-defn-props=\"{\"335552541\":1,\"335559685\":720,\"335559991\":360,\"469769226\":\"Symbol\",\"469769242\":[8226],\"469777803\":\"left\",\"469777804\":\"\uf0b7\",\"469777815\":\"hybridMultilevel\"}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">Rectification (Art. 16)<\/span><\/b><span data-contrast=\"auto\"> &#8211; <\/span><i><span data-contrast=\"auto\">&#8220;Correct what is incorrect or incomplete.&#8221;<\/span><\/i><br \/>\n<i><span data-contrast=\"auto\">Example:<\/span><\/i><span data-contrast=\"auto\"> &#8220;My address has changed &#8211; please correct it in your system.&#8221;<\/span><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"335559738\":240,\"335559739\":240}\"> <\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"5\" data-list-defn-props=\"{\"335552541\":1,\"335559685\":720,\"335559991\":360,\"469769226\":\"Symbol\",\"469769242\":[8226],\"469777803\":\"left\",\"469777804\":\"\uf0b7\",\"469777815\":\"hybridMultilevel\"}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">Erasure (Article 17)<\/span><\/b><span data-contrast=\"auto\"> &#8211; <\/span><i><span data-contrast=\"auto\">&#8220;Delete my data when you no longer have a good reason to keep it.&#8221;<\/span><\/i><br \/>\n<i><span data-contrast=\"auto\">Example:<\/span><\/i><span data-contrast=\"auto\"> &#8220;Delete my old support account.&#8221; (Subject to retention required by law.)<\/span><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"335559738\":240,\"335559739\":240}\"> <\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"5\" data-list-defn-props=\"{\"335552541\":1,\"335559685\":720,\"335559991\":360,\"469769226\":\"Symbol\",\"469769242\":[8226],\"469777803\":\"left\",\"469777804\":\"\uf0b7\",\"469777815\":\"hybridMultilevel\"}\" data-aria-posinset=\"4\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">Restriction of processing (Article 18)<\/span><\/b><span data-contrast=\"auto\"> &#8211; <\/span><i><span data-contrast=\"auto\">&#8220;Pause my data.&#8221;<\/span><\/i><br \/>\n<i><span data-contrast=\"auto\">Example:<\/span><\/i><span data-contrast=\"auto\"> &#8220;Don&#8217;t use my data until you have checked that it is correct.&#8221;<\/span><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"335559738\":240,\"335559739\":240}\"> <\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"5\" data-list-defn-props=\"{\"335552541\":1,\"335559685\":720,\"335559991\":360,\"469769226\":\"Symbol\",\"469769242\":[8226],\"469777803\":\"left\",\"469777804\":\"\uf0b7\",\"469777815\":\"hybridMultilevel\"}\" data-aria-posinset=\"5\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">Data portability (Article 20)<\/span><\/b><span data-contrast=\"auto\"> &#8211; <\/span><i><span data-contrast=\"auto\">&#8220;Give me my data in a common file format so I can take it somewhere else.&#8221;<\/span><\/i><br \/>\n<i><span data-contrast=\"auto\">Example:<\/span><\/i><span data-contrast=\"auto\"> &#8220;Send my training data as a file so I can upload it to another service.&#8221;<\/span><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"335559738\":240,\"335559739\":240}\"> <\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"5\" data-list-defn-props=\"{\"335552541\":1,\"335559685\":720,\"335559991\":360,\"469769226\":\"Symbol\",\"469769242\":[8226],\"469777803\":\"left\",\"469777804\":\"\uf0b7\",\"469777815\":\"hybridMultilevel\"}\" data-aria-posinset=\"6\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">Objection (Art. 21)<\/span><\/b><span data-contrast=\"auto\"> &#8211; <\/span><i><span data-contrast=\"auto\">&#8220;Stop a specific use of my data.&#8221;<\/span><\/i><br \/>\n<i><span data-contrast=\"auto\">Example:<\/span><\/i><span data-contrast=\"auto\"> &#8220;Stop sending me direct marketing.&#8221;<\/span><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"335559738\":240,\"335559739\":240}\"> <\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"5\" data-list-defn-props=\"{\"335552541\":1,\"335559685\":720,\"335559991\":360,\"469769226\":\"Symbol\",\"469769242\":[8226],\"469777803\":\"left\",\"469777804\":\"\uf0b7\",\"469777815\":\"hybridMultilevel\"}\" data-aria-posinset=\"7\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">Automated decisions\/profiling (<a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/HTML\/?uri=CELEX%3A02016R0679-20160504\">Art. 22<\/a>)<\/span><\/b> <span data-contrast=\"auto\"> &#8211; <\/span><i><span data-contrast=\"auto\">&#8220;If a decision is only made by an algorithm, I want a human to look at it.&#8221;<\/span><\/i><br \/>\n<i><span data-contrast=\"auto\">Example:<\/span><\/i><span data-contrast=\"auto\"> &#8220;You automatically rejected my application &#8211; get a human to review it.&#8221;<\/span><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"335559738\":240,\"335559739\":240}\"> <\/span><\/li>\n<\/ul>\n<h3 aria-level=\"3\"><span data-contrast=\"none\">Security requirements (appropriate protection, risk-based)<\/span><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"134245418\":true,\"134245529\":true,\"201341983\":0,\"335551550\":1,\"335551620\":1,\"335559685\":0,\"335559737\":0,\"335559738\":160,\"335559739\":80,\"335559740\":279}\"> <\/span><\/h3>\n<p><span data-contrast=\"auto\">You must have <\/span><b><span data-contrast=\"auto\">appropriate technical and organizational measures<\/span><\/b><span data-contrast=\"auto\">: e.g. pseudonymization\/encryption, accessibility and robustness, recoverability and continuous testing\/monitoring. The requirement is   <\/span><b><span data-contrast=\"auto\">risk-based<\/span><\/b><span data-contrast=\"auto\"> and must fit the purpose, scope and risk. <\/span> <\/p>\n<p aria-level=\"3\"><span data-contrast=\"none\">Data breaches (when and who should be notified?)<\/span><span data-ccp-props=\"{\"134245418\":true,\"134245529\":true,\"335559738\":160,\"335559739\":80}\"> <\/span><\/p>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"6\" data-list-defn-props=\"{\"335552541\":1,\"335559685\":720,\"335559991\":360,\"469769226\":\"Symbol\",\"469769242\":[8226],\"469777803\":\"left\",\"469777804\":\"\uf0b7\",\"469777815\":\"hybridMultilevel\"}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">Supervision<\/span><\/b><span data-contrast=\"auto\"> must generally be notified <\/span><b><span data-contrast=\"auto\">without undue delay and no later than 72 hours<\/span><\/b><span data-contrast=\"auto\"> after you become aware of the breach (with reasons if later).<\/span><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"335559738\":240,\"335559739\":240}\"> <\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"6\" data-list-defn-props=\"{\"335552541\":1,\"335559685\":720,\"335559991\":360,\"469769226\":\"Symbol\",\"469769242\":[8226],\"469777803\":\"left\",\"469777804\":\"\uf0b7\",\"469777815\":\"hybridMultilevel\"}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">The data subjects<\/span><\/b><span data-contrast=\"auto\"> must be informed <\/span><b><span data-contrast=\"auto\">without undue delay<\/span><\/b><span data-contrast=\"auto\">when the breach is likely to result in <\/span><b><span data-contrast=\"auto\">high risk<\/span><\/b><span data-contrast=\"auto\"> to their rights\/freedoms.<\/span><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"335559738\":240,\"335559739\":240}\"> <\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"6\" data-list-defn-props=\"{\"335552541\":1,\"335559685\":720,\"335559991\":360,\"469769226\":\"Symbol\",\"469769242\":[8226],\"469777803\":\"left\",\"469777804\":\"\uf0b7\",\"469777815\":\"hybridMultilevel\"}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"auto\">You must <\/span><b><span data-contrast=\"auto\">document<\/span><\/b><span data-contrast=\"auto\"> all breaches (facts, impact, actions). <\/span> <\/li>\n<\/ul>\n<h3 aria-level=\"3\"><span data-contrast=\"none\">&#8220;Privacy by design &amp; by default&#8221;<\/span><span data-ccp-props=\"{\"134245418\":true,\"134245529\":true,\"335559738\":160,\"335559739\":80}\"> <\/span><\/h3>\n<p><span data-contrast=\"auto\">Build in data protection <\/span><b><span data-contrast=\"auto\">from the start<\/span><\/b><span data-contrast=\"auto\"> and by <\/span><b><span data-contrast=\"auto\">default<\/span><\/b><span data-contrast=\"auto\">: limit data, access and views to what&#8217;s necessary; choose solutions and settings that automatically protect privacy. <\/span> <\/p>\n<p aria-level=\"3\"><span data-contrast=\"none\">Accountability and records (the proof that you&#8217;re doing the right thing)<\/span><span data-ccp-props=\"{\"134245418\":true,\"134245529\":true,\"335559738\":160,\"335559739\":80}\"> <\/span><\/p>\n<p><span data-contrast=\"auto\">You must be able to <\/span><b><span data-contrast=\"auto\">demonstrate<\/span><\/b><span data-contrast=\"auto\"> compliance (accountability), e.g. through <\/span><b><span data-contrast=\"auto\">records of treatment activities<\/span><\/b><span data-contrast=\"auto\">  (who, what, why, how long, security, transfers). This is a core obligation for both controllers and processors.   <\/span><a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/HTML\/?uri=CELEX%3A02016R0679-20160504\"><span data-contrast=\"none\">eur-lex.europa.eu+1<\/span><\/a><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"335559738\":240,\"335559739\":240}\"> <\/span><\/p>\n<p><b><span data-contrast=\"auto\">In short:<\/span><\/b><span data-contrast=\"auto\">  The common EU set is the definitions, principles, six legal bases, rights, security\/privacy by design, breach management, accountability and records. It is the   <\/span><b><span data-contrast=\"auto\">the framework that all member states must follow<\/span><\/b><span data-contrast=\"auto\">-On top of this, there may be narrow national special rules (e.g. CPR in Denmark), but the baseline is the same throughout the EU\/EEA.<\/span><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"335559738\":240,\"335559739\":240}\"> <\/span><\/p>\n<p><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"335559738\":240,\"335559739\":240}\"> <\/span><\/p>\n<h2 aria-level=\"2\">Where can Denmark make its own rules?<\/h2>\n<p><span data-contrast=\"auto\">The EU gives countries leeway on a few points. The most important things in Danish everyday life are   <\/span><b><span data-contrast=\"auto\">national identifiers<\/span><\/b><span data-contrast=\"auto\">: <a href=\"https:\/\/gdpr-info.eu\/art-87-gdpr\/\">GDPR&#8217;s <\/a><\/span><b><span data-contrast=\"auto\">Article 87<\/span><\/b><span data-contrast=\"auto\"> states that Member States may lay down specific conditions for the processing of e.g. national ID numbers &#8211; in Denmark: <\/span><b><span data-contrast=\"auto\">CPR number<\/span><\/b><span data-contrast=\"auto\">. <\/span> <\/p>\n<p><span data-contrast=\"auto\">In practice, this means that <\/span><b><span data-contrast=\"auto\">processing of CPR numbers<\/span><\/b><span data-contrast=\"auto\"> is separately regulated in <\/span><b><span data-contrast=\"auto\">Section 11 of<a href=\"https:\/\/www.datatilsynet.dk\/Media\/0\/8\/Vejledning%20om%20databeskyttelse%20i%20forbindelse%20med%20ans%C3%A6ttelsesforhold.pdf\">the Danish Data Protection Act<\/a> <\/span><\/b><span data-contrast=\"auto\">and that public and private actors may only use the CPR when the conditions are met. The Danish Data Protection Agency specifically emphasizes that the CPR is subject to special rules.   <\/span><a href=\"https:\/\/www.datatilsynet.dk\/Media\/0\/8\/Vejledning%20om%20databeskyttelse%20i%20forbindelse%20med%20ans%C3%A6ttelsesforhold.pdf?utm_source=chatgpt.com\"><span data-contrast=\"none\">datatilsynet.dk+1<\/span><\/a><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"335559738\":240,\"335559739\":240}\"> <\/span><\/p>\n<p><span data-contrast=\"auto\">In addition, there are Danish special rules and practices in selected areas &#8211; for example <\/span><b><span data-contrast=\"auto\">television surveillance<\/span><\/b><span data-contrast=\"auto\"> &#8211; where national rules and the Danish Data Protection Agency&#8217;s guidelines supplement GDPR (e.g. on definition, signage and deletion).<\/span><\/p>\n<h2 aria-level=\"2\">Who decides what &#8211; in Denmark and at EU level?<\/h2>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{\"335552541\":1,\"335559685\":720,\"335559991\":360,\"469769226\":\"Symbol\",\"469769242\":[8226],\"469777803\":\"left\",\"469777804\":\"\uf0b7\",\"469777815\":\"hybridMultilevel\"}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">Danish Data Protection Agency (DK)<\/span><\/b><span data-contrast=\"auto\"> Supervises in Denmark and publishes guidelines, decisions and practices.<\/span><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"335559738\":240,\"335559739\":240}\"> <\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"1\" data-list-defn-props=\"{\"335552541\":1,\"335559685\":720,\"335559991\":360,\"469769226\":\"Symbol\",\"469769242\":[8226],\"469777803\":\"left\",\"469777804\":\"\uf0b7\",\"469777815\":\"hybridMultilevel\"}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">EDPB<a href=\"https:\/\/www.edpb.europa.eu\/system\/files\/2023-04\/edpb_guidelines_202208_identifying_lsa_targeted_update_v2_en.pdf\">(European Data Protection Board)<\/a><\/span><\/b><span data-contrast=\"auto\">  gathers and coordinates interpretation across countries. For cross-border processing use   <\/span><b><span data-contrast=\"auto\">one-stop-shop<\/span><\/b><span data-contrast=\"auto\">: en <\/span><b><span data-contrast=\"auto\">lead supervisory authority (LSA)<\/span><\/b><span data-contrast=\"auto\"> leads the case, in collaboration with the supervisors involved. <\/span> <\/li>\n<\/ul>\n<p><b><span data-contrast=\"auto\">The consequence for Danish companies:<\/span><\/b><span data-contrast=\"auto\"> If you have cross-border processing, you can have one primary authority (often the Danish Data Protection Agency if the decisions are made and can be implemented in Denmark), but <\/span><b><span data-contrast=\"auto\">local rules and language requirements<\/span><\/b><span data-contrast=\"auto\"> in other countries still apply for information to data subjects and special areas. <\/span> <\/p>\n<h2 aria-level=\"2\"><b><span data-contrast=\"none\">What does this mean in practice for you <span style=\"color: #e96569;\">in Denmark<\/span>?<\/span><\/b><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"134245418\":true,\"134245529\":true,\"335559738\":299,\"335559739\":299}\"> <\/span><\/h2>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"2\" data-list-defn-props=\"{\"335552541\":1,\"335559685\":720,\"335559991\":360,\"469769226\":\"Symbol\",\"469769242\":[8226],\"469777803\":\"left\",\"469777804\":\"\uf0b7\",\"469777815\":\"hybridMultilevel\"}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">Bridge <\/span><b><span data-contrast=\"auto\">GDPR<\/span><\/b><span data-contrast=\"auto\"> as a common baseline &#8211; but check <\/span><a href=\"https:\/\/www.datatilsynet.dk\/Media\/0\/8\/Vejledning%20om%20databeskyttelse%20i%20forbindelse%20med%20ans%C3%A6ttelsesforhold.pdf\">Danish special rules<\/a><span data-contrast=\"auto\"> where they exist (typically <\/span><b><span data-contrast=\"auto\">CPR<\/span><\/b><span data-contrast=\"auto\">, criminal offenses, surveillance). <\/span> <\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"2\" data-list-defn-props=\"{\"335552541\":1,\"335559685\":720,\"335559991\":360,\"469769226\":\"Symbol\",\"469769242\":[8226],\"469777803\":\"left\",\"469777804\":\"\uf0b7\",\"469777815\":\"hybridMultilevel\"}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"auto\">Make sure that <\/span><b><span data-contrast=\"auto\">privacy texts<\/span><\/b><span data-contrast=\"auto\"> and consents are in <\/span><b><span data-contrast=\"auto\">understandable Danish<\/span><\/b><span data-contrast=\"auto\">when the target audience is in Denmark.<\/span><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"335559738\":240,\"335559739\":240}\"> <\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"2\" data-list-defn-props=\"{\"335552541\":1,\"335559685\":720,\"335559991\":360,\"469769226\":\"Symbol\",\"469769242\":[8226],\"469777803\":\"left\",\"469777804\":\"\uf0b7\",\"469777815\":\"hybridMultilevel\"}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"auto\">When involving suppliers, you must <\/span><b><span data-contrast=\"auto\">DPAs<\/span><\/b><span data-contrast=\"auto\"> (data processing agreements) must comply with both GDPR and Danish requirements\/practices.<\/span><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"335559738\":240,\"335559739\":240}\"> <\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"2\" data-list-defn-props=\"{\"335552541\":1,\"335559685\":720,\"335559991\":360,\"469769226\":\"Symbol\",\"469769242\":[8226],\"469777803\":\"left\",\"469777804\":\"\uf0b7\",\"469777815\":\"hybridMultilevel\"}\" data-aria-posinset=\"4\" data-aria-level=\"1\"><span data-contrast=\"auto\">In the case of <\/span><a href=\"https:\/\/www.edpb.europa.eu\/system\/files\/2023-04\/edpb_guidelines_202208_identifying_lsa_targeted_update_v2_en.pdf\">cross-border<\/a><span data-contrast=\"auto\"> flows: document main establishment and decision point to clarify LSA &#8211; and expect dialog with multiple supervisors if processing affects multiple countries. <\/span> <\/li>\n<\/ul>\n<p><span data-ccp-props=\"{}\"> <\/span><\/p>\n<p aria-level=\"3\"><b><span data-contrast=\"none\">Next steps<\/span><\/b><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"134245418\":true,\"134245529\":true,\"335559738\":281,\"335559739\":281}\"> <\/span><\/p>\n<p><span data-contrast=\"auto\">Grapes <\/span><a href=\"https:\/\/grapenordic.com\/en\/online-courses\/gdpr\/\"><b><span data-contrast=\"none\">GDPR Course<\/span><\/b><\/a><span data-contrast=\"auto\"> (approx. 30 min., Danish\/English) gives the entire organization a common, documentable level.<\/span><span data-ccp-props=\"{\"134233117\":false,\"134233118\":false,\"335559738\":240,\"335559739\":240}\"> <\/span><\/p>\n<p><span data-ccp-props=\"{}\"> <\/span>[\/vc_column_text][nectar_cta btn_style=&#8221;basic&#8221; heading_tag=&#8221;span&#8221; button_color=&#8221;accent-color&#8221; button_color_hover=&#8221;#e96569&#8243; text_color=&#8221;#ffffff&#8221; text_color_hover=&#8221;#ffffff&#8221; button_border_thickness=&#8221;0px&#8221; link_type=&#8221;regular&#8221; alignment=&#8221;left&#8221; alignment_tablet=&#8221;default&#8221; alignment_phone=&#8221;left&#8221; constrain_group_3=&#8221;yes&#8221; constrain_group_4=&#8221;yes&#8221; display=&#8221;block&#8221; display_tablet=&#8221;inherit&#8221; display_phone=&#8221;inherit&#8221; icon_family=&#8221;none&#8221; link_text=&#8221;SEE MORE about GDPR&#8221; padding_top=&#8221;8&#8243; padding_bottom=&#8221;8&#8243; padding_left=&#8221;18&#8243; padding_right=&#8221;18&#8243; url=&#8221;https:\/\/grapenordic.com\/en\/online-courses\/gdpr\/&#8221;][\/vc_column][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221; phone_text_alignment=&#8221;default&#8221; background_color_opacity=&#8221;1&#8243; background_hover_color_opacity=&#8221;1&#8243; column_backdrop_filter=&#8221;none&#8221; column_shadow=&#8221;none&#8221; column_border_radius=&#8221;none&#8221; column_link_target=&#8221;_self&#8221; column_position=&#8221;default&#8221; gradient_direction=&#8221;left_to_right&#8221; overlay_strength=&#8221;0.3&#8243; width=&#8221;1\/6&#8243; tablet_width_inherit=&#8221;default&#8221; animation_type=&#8221;default&#8221; bg_image_animation=&#8221;none&#8221; border_type=&#8221;simple&#8221; column_border_width=&#8221;none&#8221; column_border_style=&#8221;solid&#8221;][\/vc_column][\/vc_row]\n","protected":false},"excerpt":{"rendered":"<p>[vc_row type=&#8221;in_container&#8221; full_screen_row_position=&#8221;middle&#8221; column_margin=&#8221;default&#8221; column_direction=&#8221;default&#8221; column_direction_tablet=&#8221;default&#8221; column_direction_phone=&#8221;default&#8221; scene_position=&#8221;center&#8221; top_padding=&#8221;80px&#8221; top_padding_tablet=&#8221;20px&#8221; top_padding_phone=&#8221;0px&#8221; text_color=&#8221;dark&#8221; text_align=&#8221;left&#8221; row_border_radius=&#8221;none&#8221; row_border_radius_applies=&#8221;bg&#8221; overflow=&#8221;visible&#8221; overlay_strength=&#8221;0.3&#8243; gradient_direction=&#8221;left_to_right&#8221; shape_divider_position=&#8221;bottom&#8221; bg_image_animation=&#8221;none&#8221; gradient_type=&#8221;default&#8221; shape_type=&#8221;&#8221;][vc_column column_padding=&#8221;no-extra-padding&#8221; column_padding_tablet=&#8221;inherit&#8221; column_padding_phone=&#8221;inherit&#8221; column_padding_position=&#8221;all&#8221; column_element_direction_desktop=&#8221;default&#8221; column_element_spacing=&#8221;default&#8221; desktop_text_alignment=&#8221;default&#8221; tablet_text_alignment=&#8221;default&#8221;&#8230;<\/p>\n","protected":false},"author":50,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18],"tags":[],"post_folder":[],"class_list":["post-35686","post","type-post","status-publish","format-standard","category-uncategorized"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.7 (Yoast SEO v27.7) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>GDPR in Denmark vs. the EU - Grape<\/title>\n<meta name=\"description\" content=\"What is the difference between GDPR and the Data Protection Act? Get an overview of common EU requirements vs. Danish rules on e.g. CPR and criminal offenses.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/grapenordic.com\/en\/gdpr-in-denmark-vs-the-eu\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"GDPR in Denmark vs. the EU\" \/>\n<meta property=\"og:description\" content=\"GDPR in Denmark vs. the EU GDPR - here&#039;s how it works In a nutshell: The EU GDPR is the basic rules that apply equally throughout the EU\/EEA. In Denmark\" \/>\n<meta property=\"og:url\" content=\"https:\/\/grapenordic.com\/en\/gdpr-in-denmark-vs-the-eu\/\" \/>\n<meta property=\"og:site_name\" content=\"Grape\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/grapenordic\/\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-25T14:04:17+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-12-02T10:34:02+00:00\" \/>\n<meta name=\"author\" content=\"Eya Beldi\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Eya Beldi\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/gdpr-in-denmark-vs-the-eu\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/gdpr-in-denmark-vs-the-eu\\\/\"},\"author\":{\"name\":\"Eya Beldi\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#\\\/schema\\\/person\\\/f8d021a3e6a21a98a3338cfce304fa36\"},\"headline\":\"GDPR in Denmark vs. the EU\",\"datePublished\":\"2025-11-25T14:04:17+00:00\",\"dateModified\":\"2025-12-02T10:34:02+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/gdpr-in-denmark-vs-the-eu\\\/\"},\"wordCount\":1665,\"publisher\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#organization\"},\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/gdpr-in-denmark-vs-the-eu\\\/\",\"url\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/gdpr-in-denmark-vs-the-eu\\\/\",\"name\":\"GDPR in Denmark vs. the EU - Grape\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#website\"},\"datePublished\":\"2025-11-25T14:04:17+00:00\",\"dateModified\":\"2025-12-02T10:34:02+00:00\",\"description\":\"What is the difference between GDPR and the Data Protection Act? Get an overview of common EU requirements vs. Danish rules on e.g. CPR and criminal offenses.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/gdpr-in-denmark-vs-the-eu\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/grapenordic.com\\\/en\\\/gdpr-in-denmark-vs-the-eu\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/gdpr-in-denmark-vs-the-eu\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Frontpage\",\"item\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/grape-splitside\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"GDPR in Denmark vs. the EU\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/\",\"name\":\"Grape\",\"description\":\"Great at people\",\"publisher\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#organization\",\"name\":\"Grape A\\\/S\",\"alternateName\":\"Grape\",\"url\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/grapenordic.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/Grape698x698.png\",\"contentUrl\":\"https:\\\/\\\/grapenordic.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/Grape698x698.png\",\"width\":696,\"height\":696,\"caption\":\"Grape A\\\/S\"},\"image\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/grapenordic\\\/\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/grapenordic\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UC2OoQQVitKhGDNqQEH0av0Q\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#\\\/schema\\\/person\\\/f8d021a3e6a21a98a3338cfce304fa36\",\"name\":\"Eya Beldi\",\"url\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/author\\\/eyagrapenordic-com\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"GDPR in Denmark vs. the EU - Grape","description":"What is the difference between GDPR and the Data Protection Act? Get an overview of common EU requirements vs. Danish rules on e.g. CPR and criminal offenses.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/grapenordic.com\/en\/gdpr-in-denmark-vs-the-eu\/","og_locale":"en_US","og_type":"article","og_title":"GDPR in Denmark vs. the EU","og_description":"GDPR in Denmark vs. the EU GDPR - here's how it works In a nutshell: The EU GDPR is the basic rules that apply equally throughout the EU\/EEA. In Denmark","og_url":"https:\/\/grapenordic.com\/en\/gdpr-in-denmark-vs-the-eu\/","og_site_name":"Grape","article_publisher":"https:\/\/www.facebook.com\/grapenordic\/","article_published_time":"2025-11-25T14:04:17+00:00","article_modified_time":"2025-12-02T10:34:02+00:00","author":"Eya Beldi","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Eya Beldi","Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/grapenordic.com\/en\/gdpr-in-denmark-vs-the-eu\/#article","isPartOf":{"@id":"https:\/\/grapenordic.com\/en\/gdpr-in-denmark-vs-the-eu\/"},"author":{"name":"Eya Beldi","@id":"https:\/\/grapenordic.com\/en\/#\/schema\/person\/f8d021a3e6a21a98a3338cfce304fa36"},"headline":"GDPR in Denmark vs. the EU","datePublished":"2025-11-25T14:04:17+00:00","dateModified":"2025-12-02T10:34:02+00:00","mainEntityOfPage":{"@id":"https:\/\/grapenordic.com\/en\/gdpr-in-denmark-vs-the-eu\/"},"wordCount":1665,"publisher":{"@id":"https:\/\/grapenordic.com\/en\/#organization"},"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/grapenordic.com\/en\/gdpr-in-denmark-vs-the-eu\/","url":"https:\/\/grapenordic.com\/en\/gdpr-in-denmark-vs-the-eu\/","name":"GDPR in Denmark vs. the EU - Grape","isPartOf":{"@id":"https:\/\/grapenordic.com\/en\/#website"},"datePublished":"2025-11-25T14:04:17+00:00","dateModified":"2025-12-02T10:34:02+00:00","description":"What is the difference between GDPR and the Data Protection Act? Get an overview of common EU requirements vs. Danish rules on e.g. CPR and criminal offenses.","breadcrumb":{"@id":"https:\/\/grapenordic.com\/en\/gdpr-in-denmark-vs-the-eu\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/grapenordic.com\/en\/gdpr-in-denmark-vs-the-eu\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/grapenordic.com\/en\/gdpr-in-denmark-vs-the-eu\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Frontpage","item":"https:\/\/grapenordic.com\/en\/grape-splitside\/"},{"@type":"ListItem","position":2,"name":"GDPR in Denmark vs. the EU"}]},{"@type":"WebSite","@id":"https:\/\/grapenordic.com\/en\/#website","url":"https:\/\/grapenordic.com\/en\/","name":"Grape","description":"Great at people","publisher":{"@id":"https:\/\/grapenordic.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/grapenordic.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/grapenordic.com\/en\/#organization","name":"Grape A\/S","alternateName":"Grape","url":"https:\/\/grapenordic.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/grapenordic.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/grapenordic.com\/wp-content\/uploads\/2024\/02\/Grape698x698.png","contentUrl":"https:\/\/grapenordic.com\/wp-content\/uploads\/2024\/02\/Grape698x698.png","width":696,"height":696,"caption":"Grape A\/S"},"image":{"@id":"https:\/\/grapenordic.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/grapenordic\/","https:\/\/www.linkedin.com\/company\/grapenordic\/","https:\/\/www.youtube.com\/channel\/UC2OoQQVitKhGDNqQEH0av0Q"]},{"@type":"Person","@id":"https:\/\/grapenordic.com\/en\/#\/schema\/person\/f8d021a3e6a21a98a3338cfce304fa36","name":"Eya Beldi","url":"https:\/\/grapenordic.com\/en\/author\/eyagrapenordic-com\/"}]}},"_links":{"self":[{"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/posts\/35686","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/users\/50"}],"replies":[{"embeddable":true,"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/comments?post=35686"}],"version-history":[{"count":0,"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/posts\/35686\/revisions"}],"wp:attachment":[{"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/media?parent=35686"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/categories?post=35686"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/tags?post=35686"},{"taxonomy":"post_folder","embeddable":true,"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/post_folder?post=35686"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}