Source: https://www.alstongdprtracker.com/denmark-2/
Timestamp: 2019-03-21 07:30:06
Document Index: 527994981

Matched Legal Cases: ['§ 6', '§ 9', '§ 15', '§ 20', '§ 22', '§ 24', '§ 30', '§ 41', '§ 14', '§ 41']

Denmark – Alston GDPR Tracker
Minimum age lowered: Minimum age to provide consent is lowered to 13 years (Ch 3, § 6 Danish Act).
Information Systems in the Public Interest: Processing personal data relating to criminal convictions and offenses is permitted if done solely for providing information systems with significant public benefit and when the processing is necessary for implementation of the systems. This information may not be disclosed to or processed by credit information agencies (Ch 3, § 9; Ch 4, § 15; Ch 5, § 20 Danish Act).
Exception to Transparency Requirement: A data controller does not need to provide notice to data subjects if this is in the interest of the data subject or another natural person (Ch 6, § 22 Danish Act).
Exception for Public Administration: Information processed for public administration as part of administrative cases may be exempted from the right of access in accordance with the Danish Public Administration Act.
Exception for Courts: The right of information and access shall not apply to the processing of personal data made to the courts when they act in their capacity as courts.
Exception for Scientific and Statistical Processing: Rights of access, correction, restriction, and objection shall not apply if the information is exclusively processed for scientific or statistical purposes.
Exception for Criminal Investigation: There is no obligation for the controller to notify the data subject of a data breach if the notification of data subjects interferes with a criminal investigation as determined by the police.
Confidentiality: Data protection officers shall not unlawfully disclose or exploit information that they have become aware of in the performance of their duties (Ch 7, § 24 Danish Act).
No Appeal Before Administrative Authority: The Data Inspectorate’s decisions cannot be appealed before another administrative authority (Ch 10, § 30 Danish Act).
Criminal Penalties: Because the legal system of Denmark does not allow for administrative fines, the Danish Act provides for criminal penalties for violations of the GDPR, including fines or imprisonment for up to six months (Ch 12, § 41 Danish Act).
Archiving: Information covered by the Danish Act may be transferred to archive storage in accordance with the rules of the Archive Act (Ch 3, § 14 Danish Act).
DPO Obligation of Secrecy: Data protection officers that unlawfully disclose or exploit information obtained in the performance of their duties shall be fined, unless higher punishment is allowed by other legislation (Ch 12, § 41(4) Danish Act).