personoplysninger

Personoplysninger is the Danish term for personal data, meaning any information relating to an identified or identifiable natural person (the data subject). In the European Union, this concept is defined in the GDPR (General Data Protection Regulation), which applies across member states and to organizations processing such data.

Personal data can be obvious identifiers like a name or address, but also includes information such as location data, online identifiers, IP addresses, and health, genetic, or biometric data. Some categories of data are considered especially sensitive (special categories) and require higher protection, with stricter rules on processing and consent.

Key principles govern the processing of personoplysninger. Processing must be lawful, fair, and transparent; occur for explicit, legitimate purposes; be limited to what is necessary; kept accurate and up to date; stored no longer than needed; and protected against unauthorized access or loss. Organizations must show accountability for complying with these principles.

Data subjects have rights regarding their personoplysninger, including access to their data, correction of inaccuracies, deletion (the right to be forgotten), restriction of processing, data portability, and objection to certain processing. They also have rights related to automated decision-making and to withdraw consent where applicable.

Roles and responsibilities include the data controller, who determines purposes and means of processing, and the data processor, which handles data on the controller’s behalf. Security measures, breach notification, and, in certain cases, designation of a data protection officer are required.

Cross-border transfers of personoplysninger outside the EEA require safeguards such as adequacy decisions or standard contractual clauses. Violations can lead to enforcement actions by national data protection authorities.