{"id":35696,"date":"2025-11-25T13:15:54","date_gmt":"2025-11-25T13:15:54","guid":{"rendered":"https:\/\/grapenordic.com\/gdpr-compliance-in-the-nordics\/"},"modified":"2026-10-06T13:08:03","modified_gmt":"2026-10-06T13:08:03","slug":"gdpr-compliance-in-the-nordics","status":"publish","type":"post","link":"https:\/\/grapenordic.com\/en\/gdpr-compliance-in-the-nordics\/","title":{"rendered":"GDPR compliance in the Nordics"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">GDPR compliance in the Nordics (DK\/SE\/NO\/FI) \u2013 special rules in each country<\/h2>\n\n<p class=\"wp-block-paragraph\">GDPR applies equally across the <a href=\"https:\/\/www.europarl.europa.eu\/doceo\/document\/PETI-CM-776873_EN.pdf\">EU\/EEA<\/a> \u2013 but each country has specific national rules and practices that particularly affect issues such as <b>camera surveillance, employee monitoring and the use of national ID numbers<\/b>. Here are the key differences you need to know when working Nordic. (GDPR Article 87, for example, gives countries the right to set special conditions for national ID numbers). <\/p>\n\n<h2 class=\"wp-block-heading\">GDPR in <span style=\"color: #e96569;\">Denmark<\/span> (DK)<\/h2>\n\n<p class=\"wp-block-paragraph\">The Danish <b>Danish Data Protection Act<\/b> complements the GDPR. Two things stand out in practice:<span data-ccp-props=\"{{{wpml_tag_9}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_10}}}\"> <\/span><\/p>\n\n<ul class=\"wp-block-list\">\n<li><b>CPR numbers<\/b> have special rules (\u00a711) that limit their use and require additional legal authority\/security.<span data-ccp-props=\"{{{wpml_tag_7}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_8}}}\"> <\/span><\/li>\n\n\n\n<li>CCTV surveillance is a separate area that the Danish Data Protection Agency also oversees.<br\/>See more at the Danish Data Protection Agency (the national supervisory authority). <a href=\"https:\/\/www.datatilsynet.dk\/media\/7753\/danish-data-protection-act.pdf?utm_source=chatgpt.comCCTV surveillance is a separate area that the Danish Data Protection Agency also oversees. See more at the Danish Data Protection Agency (the national supervisory authority). datatilsynet.dk\">datatilsynet.dk<\/a><\/li>\n<\/ul>\n\n<h2 class=\"wp-block-heading\">GDPR in Sweden (SE)<\/h2>\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.imy.se\/en\/about-us\/swedish-authority-for-privacy-protections-assignment\/?utm_source=chatgpt.com\">IMY<\/a> (Integritetsskyddsmyndigheten) is the supervisory authority. Sweden has both GDPR and a Camera surveillance law. From <b>On April 1, 2025<\/b> the requirement for prior authorization for many types of camera surveillance was removed (in return, liability and information requirements are tightened). <\/p>\n\n<p class=\"wp-block-paragraph\">Sweden also has <a href=\"https:\/\/www.activemind.legal\/law\/se-sensitive-data\/\">special rules<\/a> for <b>social security number <\/b>The starting point is that processing requires consent \u2013 with exceptions where unique identification is necessary or there are other compelling reasons for this. <\/p>\n\n<h2 class=\"wp-block-heading\">GDPR in Norway (NO)<\/h2>\n\n<p class=\"wp-block-paragraph\">Data Protection Authority is the supervisory authority. Norway is known for a <b>Restrictive employee monitoring practices<\/b>: Using digital tools to monitor employee devices is \u201c<a href=\"https:\/\/iapp.org\/news\/b\/norway-dpa-says-monitoring-employees-electronic-equipment-use-basically-illegal\">fundamentally illegal<\/a>\u201c, with narrow exceptions and requirements for careful assessment and proportionality. There are special rules for access to email etc. <\/p>\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/lovdata.no\/dokument\/NLE\/lov\/2018-06-15-38\">Norway\u2019s rules<\/a> on <b>national identity number<\/b> (national ID number) require that processing only occurs when there is a legitimate need for secure identification. <\/p>\n\n<h2 class=\"wp-block-heading\">GDPR in <span style=\"color: #e96569;\">Finland <\/span>(FI)<\/h2>\n\n<p class=\"wp-block-paragraph\">The supervision is handled by Data Protection Ombudsman (Tietosuojavaltuutetun toimisto). Finland has a widespread use of <b>personal identity code(<a href=\"https:\/\/tietosuoja.fi\/en\/home\">henkil\u00f6tunnus<\/a>) <\/b>with special rules on when and how it can be processed. The government pages have practical Q&amp;As on usage \u2013 also in industry-specific situations. <\/p>\n\n<p class=\"wp-block-paragraph\"><span data-ccp-props=\"{{{wpml_tag_1}}}{{{wpml_tag_2}}}\"> <\/span><\/p>\n\n<h2 class=\"wp-block-heading\">What does it mean to you?<\/h2>\n\n<ul class=\"wp-block-list\">\n<li>Plan across countries but check <b>local special rules<\/b> for CCTV, employee verification and national ID numbers before rolling out processes\/systems.<span data-ccp-props=\"{{{wpml_tag_15}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;335559738&quot;:240,&quot;335559739&quot;:240{{{wpml_tag_16}}}\"> <\/span><\/li>\n\n\n\n<li>Do you have <b>cross-border treatment <\/b>one lead regulator can become your primary contact (one-stop-shop), but local requirements (language, practices) still apply.<br\/><\/li>\n<\/ul>\n\n<h2 class=\"wp-block-heading\"><b><span data-contrast=\"none\">Train your entire organization \u2013 fast<\/span><\/b><span data-ccp-props=\"{{{wpml_tag_5}}}&quot;134233117&quot;:false,&quot;134233118&quot;:false,&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;335559738&quot;:281,&quot;335559739&quot;:281{{{wpml_tag_6}}}\"> <\/span><\/h2>\n\n<p class=\"wp-block-paragraph\">Grapes <a href=\"https:\/\/grapenordic.com\/online-kurser\/gdpr-compliance-online-kursus\">GDPR<\/a> Course online course provides a common level across your organization and can be adapted to your policies \u2013 so you both do right and can <b>prove<\/b> it. <\/p>\n","protected":false},"excerpt":{"rendered":"<p>GDPR compliance in the Nordics (DK\/SE\/NO\/FI) \u2013 special rules in each country GDPR applies equally across the EU\/EEA \u2013 but each country has specific national rules and practices that particularly affect issues such as camera surveillance, employee monitoring and the use of national ID numbers. Here are the key differences you need to know when [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[11],"tags":[52],"class_list":["post-35696","post","type-post","status-publish","format-standard","hentry","category-compliance","tag-hidden-from-feed"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.7 (Yoast SEO v28.7) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>GDPR compliance in the Nordics - Grape<\/title>\n<meta name=\"description\" content=\"The Nordics: Do you know the differences in DK, SE, NO and FI? Get to grips with important special rules such as surveillance and ID numbers. Read about Nordic compliance here.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/grapenordic.com\/en\/gdpr-compliance-in-the-nordics\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"GDPR compliance in the Nordics\" \/>\n<meta property=\"og:description\" content=\"The Nordics: Do you know the differences in DK, SE, NO and FI? Get to grips with important special rules such as surveillance and ID numbers. Read about Nordic compliance here.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/grapenordic.com\/en\/gdpr-compliance-in-the-nordics\/\" \/>\n<meta property=\"og:site_name\" content=\"Grape\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/grapenordic\/\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-25T13:15:54+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-06T13:08:03+00:00\" \/>\n<meta name=\"author\" content=\"Anders Schultz-M\u00f8ller\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Anders Schultz-M\u00f8ller\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/gdpr-compliance-in-the-nordics\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/gdpr-compliance-in-the-nordics\\\/\"},\"author\":{\"name\":\"Anders Schultz-M\u00f8ller\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#\\\/schema\\\/person\\\/0315a920897ccb4a87be335c1ddb5803\"},\"headline\":\"GDPR compliance in the Nordics\",\"datePublished\":\"2025-11-25T13:15:54+00:00\",\"dateModified\":\"2026-10-06T13:08:03+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/gdpr-compliance-in-the-nordics\\\/\"},\"wordCount\":421,\"publisher\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#organization\"},\"keywords\":[\"hidden-from-feed\"],\"articleSection\":[\"Compliance\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/gdpr-compliance-in-the-nordics\\\/\",\"url\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/gdpr-compliance-in-the-nordics\\\/\",\"name\":\"GDPR compliance in the Nordics - Grape\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#website\"},\"datePublished\":\"2025-11-25T13:15:54+00:00\",\"dateModified\":\"2026-10-06T13:08:03+00:00\",\"description\":\"The Nordics: Do you know the differences in DK, SE, NO and FI? Get to grips with important special rules such as surveillance and ID numbers. Read about Nordic compliance here.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/gdpr-compliance-in-the-nordics\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/grapenordic.com\\\/en\\\/gdpr-compliance-in-the-nordics\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/gdpr-compliance-in-the-nordics\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Frontpage\",\"item\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"GDPR compliance in the Nordics\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/\",\"name\":\"Grape\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#organization\",\"name\":\"Grape\",\"url\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/grapenordic.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/grape_logo_hvid-2-1.webp\",\"contentUrl\":\"https:\\\/\\\/grapenordic.com\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/grape_logo_hvid-2-1.webp\",\"width\":433,\"height\":130,\"caption\":\"Grape\"},\"image\":{\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/grapenordic\\\/\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/grapenordic\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UC2OoQQVitKhGDNqQEH0av0Q\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/#\\\/schema\\\/person\\\/0315a920897ccb4a87be335c1ddb5803\",\"name\":\"Anders Schultz-M\u00f8ller\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/89618f7993a73fc3759ca10e8318b7f9157e8359172affff032c92fbc0c99a0f?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/89618f7993a73fc3759ca10e8318b7f9157e8359172affff032c92fbc0c99a0f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/89618f7993a73fc3759ca10e8318b7f9157e8359172affff032c92fbc0c99a0f?s=96&d=mm&r=g\",\"caption\":\"Anders Schultz-M\u00f8ller\"},\"url\":\"https:\\\/\\\/grapenordic.com\\\/en\\\/author\\\/anders-schultz-moller\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"GDPR compliance in the Nordics - Grape","description":"The Nordics: Do you know the differences in DK, SE, NO and FI? Get to grips with important special rules such as surveillance and ID numbers. Read about Nordic compliance here.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/grapenordic.com\/en\/gdpr-compliance-in-the-nordics\/","og_locale":"en_US","og_type":"article","og_title":"GDPR compliance in the Nordics","og_description":"The Nordics: Do you know the differences in DK, SE, NO and FI? Get to grips with important special rules such as surveillance and ID numbers. Read about Nordic compliance here.","og_url":"https:\/\/grapenordic.com\/en\/gdpr-compliance-in-the-nordics\/","og_site_name":"Grape","article_publisher":"https:\/\/www.facebook.com\/grapenordic\/","article_published_time":"2025-11-25T13:15:54+00:00","article_modified_time":"2026-10-06T13:08:03+00:00","author":"Anders Schultz-M\u00f8ller","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Anders Schultz-M\u00f8ller","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/grapenordic.com\/en\/gdpr-compliance-in-the-nordics\/#article","isPartOf":{"@id":"https:\/\/grapenordic.com\/en\/gdpr-compliance-in-the-nordics\/"},"author":{"name":"Anders Schultz-M\u00f8ller","@id":"https:\/\/grapenordic.com\/en\/#\/schema\/person\/0315a920897ccb4a87be335c1ddb5803"},"headline":"GDPR compliance in the Nordics","datePublished":"2025-11-25T13:15:54+00:00","dateModified":"2026-10-06T13:08:03+00:00","mainEntityOfPage":{"@id":"https:\/\/grapenordic.com\/en\/gdpr-compliance-in-the-nordics\/"},"wordCount":421,"publisher":{"@id":"https:\/\/grapenordic.com\/en\/#organization"},"keywords":["hidden-from-feed"],"articleSection":["Compliance"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/grapenordic.com\/en\/gdpr-compliance-in-the-nordics\/","url":"https:\/\/grapenordic.com\/en\/gdpr-compliance-in-the-nordics\/","name":"GDPR compliance in the Nordics - Grape","isPartOf":{"@id":"https:\/\/grapenordic.com\/en\/#website"},"datePublished":"2025-11-25T13:15:54+00:00","dateModified":"2026-10-06T13:08:03+00:00","description":"The Nordics: Do you know the differences in DK, SE, NO and FI? Get to grips with important special rules such as surveillance and ID numbers. Read about Nordic compliance here.","breadcrumb":{"@id":"https:\/\/grapenordic.com\/en\/gdpr-compliance-in-the-nordics\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/grapenordic.com\/en\/gdpr-compliance-in-the-nordics\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/grapenordic.com\/en\/gdpr-compliance-in-the-nordics\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Frontpage","item":"https:\/\/grapenordic.com\/en\/"},{"@type":"ListItem","position":2,"name":"GDPR compliance in the Nordics"}]},{"@type":"WebSite","@id":"https:\/\/grapenordic.com\/en\/#website","url":"https:\/\/grapenordic.com\/en\/","name":"Grape","description":"","publisher":{"@id":"https:\/\/grapenordic.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/grapenordic.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/grapenordic.com\/en\/#organization","name":"Grape","url":"https:\/\/grapenordic.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/grapenordic.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/grapenordic.com\/wp-content\/uploads\/2026\/09\/grape_logo_hvid-2-1.webp","contentUrl":"https:\/\/grapenordic.com\/wp-content\/uploads\/2026\/09\/grape_logo_hvid-2-1.webp","width":433,"height":130,"caption":"Grape"},"image":{"@id":"https:\/\/grapenordic.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/grapenordic\/","https:\/\/www.linkedin.com\/company\/grapenordic\/","https:\/\/www.youtube.com\/channel\/UC2OoQQVitKhGDNqQEH0av0Q"]},{"@type":"Person","@id":"https:\/\/grapenordic.com\/en\/#\/schema\/person\/0315a920897ccb4a87be335c1ddb5803","name":"Anders Schultz-M\u00f8ller","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/89618f7993a73fc3759ca10e8318b7f9157e8359172affff032c92fbc0c99a0f?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/89618f7993a73fc3759ca10e8318b7f9157e8359172affff032c92fbc0c99a0f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/89618f7993a73fc3759ca10e8318b7f9157e8359172affff032c92fbc0c99a0f?s=96&d=mm&r=g","caption":"Anders Schultz-M\u00f8ller"},"url":"https:\/\/grapenordic.com\/en\/author\/anders-schultz-moller\/"}]}},"_links":{"self":[{"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/posts\/35696","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/comments?post=35696"}],"version-history":[{"count":0,"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/posts\/35696\/revisions"}],"wp:attachment":[{"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/media?parent=35696"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/categories?post=35696"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/grapenordic.com\/en\/wp-json\/wp\/v2\/tags?post=35696"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}