personoplysningsloven

Personoplysningsloven is the Danish data protection act. It was enacted to implement the European Union's General Data Protection Regulation (GDPR) into Danish law. The law governs how personal data can be processed and protected by organizations and public authorities within Denmark. Its primary aim is to safeguard individuals' fundamental rights and freedoms, particularly their right to privacy, concerning the processing of their personal data.

The law defines what constitutes personal data, which includes any information relating to an identified or identifiable natural person. It sets out various principles that must be adhered to when processing personal data, such as lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, and integrity and confidentiality. Individuals have specific rights under the law, including the right to access their data, rectify inaccuracies, erase data, restrict processing, and object to certain types of processing.

Personoplysningsloven imposes obligations on data controllers and data processors, requiring them to implement appropriate technical and organizational measures to ensure the security of personal data. It also mandates data protection impact assessments for processing activities likely to result in a high risk to individuals' rights and freedoms. The Danish Data Protection Agency (Datatilsynet) is the supervisory authority responsible for enforcing the law and investigating potential breaches. Fines can be imposed for non-compliance.