Data Protection law

The laws on protection of personal data are a rapidly developing area that is becoming increasingly important in many situations, e.g. in business transfers, outsourcing, intra-group data transfers, anti-corruption practices, processing of data on employees, customers and business partners. Indepth knowledge and practical experience in dealing with the special rules applicable to the various situations are of decisive importance to the value of the legal advice provided.
 
The main rules in this area originate from the European Union, but Denmark has adopted a great number of special rules in certain areas, e.g. civil registration (CPR) numbers, data on criminal offences, other data of a purely private nature, and processing of data in the ordinary course of credit rating business. Furthermore, special - and stricter - legislation applies in many industries. 

Kromann Reumert's specialists advise on all legal aspects of data protection law within all industries, including the financial, research, health and telecommunication industries, and during recent years we have significantly increased our data protection expertise and practice area. Consequently, with our many experienced and highly qualified lawyers and assistant lawyers, Kromann Reumert is one of the leading Danish law firms in this practice area.

Typical examples of tasks involving data protection law challenges are:

• transfer of data to central group databases;
• transfer of data to countries outside the European Union, including in connection with outsourcing;
• drafting and implementation of binding corporate rules;
• introduction of whistleblower schemes;
• processing of data in connection with anti-corruption measures and investigations;
• processing of special types of data, e.g. credit information, customer data, health information and employee data;
• collection and processing of data in the medical sector, e.g. in connection with clinical trials;
• personal data issues in connection with M&As and insolvency proceedings;
• drafting of personal data policies;
• the rights of the data subjects, including the right of access;
• technical and organisational security and privacy requirements;
• notification and permission issues, and complaints to the regulatory authorities.

We assist our clients in obtaining approvals for data processing, in making inquiries to the Data Protection Agency, and in complaints or regulatory procedures relating to all of the above issues.