Denmark. ePrivacy / marketing. Act
Cookie OrderExecutive Order No. 1148 of 9 December 2011 on information and consent when storing or accessing information in end-user terminal equipment (Cookiebekendtgørelsen)
Partly verified
Low confidence.Which agency currently enforces the order (Erhvervsstyrelsen vs Digitaliseringsstyrelsen) and the exact in-force date not verified on an official source.
§1Summary
- Synopsis
The Danish Cookie Order implements Art 5(3) ePrivacy, requiring clear information and consent before storing or reading information on users' devices unless strictly necessary.
- Key themes
- Unique features
Enforcement of the order sits with a telecom/business agency rather than the DPA; Datatilsynet separately enforces the GDPR side of cookie-based tracking.
- SaaS relevance
Any SaaS website, app or product that sets non-essential cookies/SDKs or sends marketing emails/SMS to users in this country needs prior consent (subject to exemptions) under this law, regardless of where the provider is based.
§2Obligations
- Extraterritorial
- Yes
- Breach notification
- Telecom providers: authority notification under Reg 611/2013; otherwise GDPR
- DPO
- No
- Cross-border transfers
- None
- Maximum penalty
- Fines under the order (court-imposed); GDPR fines
§3Dates
- Key dates
- Adopted
- In force
- Issued under the Electronic Communications Networks and Services Act
§4Text and authority
- Text
- Authoritative text retsinformation.dk
- Authority
- Danish Agency for Digital Government / Danish Business Authority (cookie order); Datatilsynet (GDPR aspects)
§5Where it applies
- Domestic law of
- Denmark
§6Sources and verification
- Verification
Low confidence.
Partly verified
Low confidence.Which agency currently enforces the order (Erhvervsstyrelsen vs Digitaliseringsstyrelsen) and the exact in-force date not verified on an official source.