Sanctions and penalties under Danish data protection law

The DPA administers the enforcement powers of the Danish Data Protection Agency. The DPA allows the Agency to exercise powers through information notices, assessment notices and enforcement notices.

Offences relating to personal data

Violation of the GDPR and DPA constitutes a criminal offence and can be punished by imprisonment of up to six months.

An inventory of prosecutions can be found here: https://www.datatilsynet.dk/tilsyn-og-afgoerelser/afgoerelser/