Denmark Datatilsynet News

Denmark Opens New AI Sandbox Round for Applications

Datatilsynet and Digitaliseringsstyrelsen have opened applications for a new round of their joint regulatory AI sandbox. The sandbox offers free, hands-on guidance on GDPR compliance and the EU AI Act for companies, authorities, and organizations developing or using AI. Each sandbox engagement runs up to four months, is tailored to the specific project, and culminates in a public report sharing lessons learned. Applications are evaluated based on societal significance, level of innovation, and project maturity.

Denmark DPA 2025 Annual Report Published

Datatilsynet (Denmark's Data Protection Authority) has published its 2025 Annual Report, covering the authority's supervisory work, new guidance documents, updated enforcement practices, oversight of municipalities, supervision of AI use, international cooperation, consultation on legislative proposals, and trends in personal data breach notifications. The report also highlights the DPA's focus on advisory services supporting both citizens and data controllers. The report was published on March 31, 2026.

Danish DPA Approves Employer Sharing Union Data

Datatilsynet issued a decision in a complaint case where a union, on behalf of its member, challenged an employer's disclosure of personal data—including union membership information—to a third party in connection with an employment dispute between the parties. The third party was a relative of the employer and a colleague in the complainant's current position. Datatilsynet found the disclosure fell within the framework of data protection rules, noting the employer shared information with an advisor who assisted in hiring the complainant and would have the necessary qualifications to assist in the employment case. The DPA emphasised that information about party representatives—including union affiliation—is typically considered relevant to disclose to advisors when defending against legal claims.