Your Rights Under GDPR in Denmark (2026 Legal Guide) — Rules & Requirements
About this article
Sourced from Danish Acts of Parliament (love), executive orders (bekendtgørelser), and official government guidance. Written in plain language for general understanding — this is educational content, not legal advice. Our editorial standards
What is this right?
Denmark operates under EU GDPR + Databeskyttelsesloven (Lov nr 502 af 23 maj 2018). Data-subject rights: access (Art 15), rectification (16), erasure (17), restriction (18), portability (20), objection (21). Regulator: Datatilsynet at datatilsynet.dk. Administrative fines up to €20 million or 4% of annual global turnover.
When does it apply?
- A controller refuses to disclose, correct, or delete your data.
- You withdraw consent but processing continues.
- You are a victim of a data breach.
- Direct marketing without consent.
- You wish to object to profiling.
Using Your Rights Under GDPR in Denmark
- Send a written subject access request to the controller. One-month response under GDPR Art 12.
- If unsatisfied, complain to Datatilsynet at datatilsynet.dk.
- For damages, civil litigation under GDPR Art 82.
What should you NOT do?
- Don't skip the controller's internal channel.
- Don't provide more identifying data than necessary.
About Data Privacy & Digital Rights in Denmark
Denmark's data-protection framework is EU GDPR as supplemented by Databeskyttelsesloven (Data Protection Act, Lov nr 502 af 23 maj 2018). Regulator: Datatilsynet. For non-consensual intimate imagery (NCII), Straffeloven §264d criminalises sharing of intimate imagery without consent — penalties up to 3 years' imprisonment. Investigation: Danish Police (cybercrime cases route to NC3).
Common Questions
How long does Datatilsynet take to respond?
Initial acknowledgment is typically within a few weeks; full investigation can take months for complex cases. Datatilsynet publishes annual reports with case statistics. For cross-border GDPR cases, the EU One-Stop-Shop mechanism applies and timelines can extend.
Can I claim damages?
Yes — Article 82 GDPR allows compensation for material and non-material damage. Claims proceed via Danish civil courts (byret / landsret). Recent CJEU rulings have clarified that non-material damage requires actual demonstrated harm.
What is the your rights under gdpr and databeskyttelsesloven right in Denmark?
Denmark operates under EU GDPR + Databeskyttelsesloven (Lov nr 502 af 23 maj 2018). Data-subject rights: access (Art 15), rectification (16), erasure (17), restriction (18), portability (20), objection (21). Regulator: Datatilsynet at datatilsynet.dk. Administrative fines up to €20 million or 4% of annual global turnover.
When does it apply — your rights under gdpr and databeskyttelsesloven?
A controller refuses to disclose, correct, or delete your data.You withdraw consent but processing continues.You are a victim of a data breach.Direct marketing without consent.You wish to object to profiling.
What are my data-protection rights in Denmark?
Send a written subject access request to the controller. One-month response under GDPR Art 12.If unsatisfied, complain to Datatilsynet at datatilsynet.dk.For damages, civil litigation under GDPR Art 82.
What should you NOT do — your rights under gdpr and databeskyttelsesloven?
Don't skip the controller's internal channel.Don't provide more identifying data than necessary.