AI regulation in Denmark: what applies to your company
An overview of AI regulation in Denmark: what applies now, what is coming, who supervises, and four things your company should do.
Many companies are waiting for a Danish AI law before getting started. It is not coming. The EU's AI Act already applies, and part of it has applied since February 2025. Here is what applies now, what is coming, and what you need to do.
Status as of October 6, 2026.
One law, not many
AI regulation in Denmark is first and foremost the AI Act, Regulation (EU) 2024/1689. A regulation applies directly in all EU countries, so there is no Danish version to wait for. Denmark has passed a law with supplementary provisions, but it concerns which authorities supervise.
Alongside it, GDPR still applies. If you use AI to process personal data, both sets of rules apply.
What applies now
- Prohibited AI practices (Article 5), since February 2, 2025. For example, emotion recognition in the workplace and social scoring. The July 2026 amendment added two new bans: AI that creates sexual images of real people without consent, and AI that creates child abuse material.
- AI literacy (Article 4), since February 2, 2025. Companies must support the development of AI skills among the employees who work with AI.
- General-purpose AI models like ChatGPT and Claude, since August 2, 2025. The requirements sit with the providers, not with you.
- Transparency (Article 50), since August 2, 2026. People must know when they are talking to an AI, and AI-generated content must be recognizable.
- Supervision, since August 2, 2026. The authorities now have formal powers.
What is coming
- December 2, 2026: labeling of AI-generated content in machine-readable format, for systems that were on the market before August 2026.
- December 2, 2027: requirements for standalone high-risk systems (Annex III), such as AI for recruitment and employee evaluation.
- August 2, 2028: requirements for high-risk AI in products that are already regulated (Annex I).
The high-risk dates were postponed by the July 2026 amendment, the so-called Digital Omnibus. The same amendment rewrote Article 4: you must support the development of AI skills, but not guarantee a specific level for each individual.
Who supervises in Denmark
Digitaliseringsstyrelsen (the Danish Agency for Digital Government) is the coordinating authority and central point of contact. Datatilsynet (the Danish Data Protection Authority) and Domstolsstyrelsen (the Danish Court Administration) are designated as competent authorities in their respective areas.
Fines for the most serious violations can reach 35 million euros or 7 percent of global revenue. Article 4 carries no EU fine. Sanctions are set nationally, and the risk is indirect: a lack of measures counts against you if a case about something else arises.
What it means for an ordinary company
Most Danish companies do not develop AI. They use it. In the language of the regulation, you are deployers, and then three things apply to you:
- AI literacy. Employees who use AI must receive training that fits their role. You must be able to show what you have done.
- No prohibited uses. No emotion recognition of employees, no social scoring.
- Transparency. If you set up a chatbot for customers, they must know they are talking to an AI.
If you use AI for recruitment, employee evaluation, or credit assessment, the high-risk rules hit you from December 2027. That brings requirements for human oversight, logging, and instruction of the employees who use the system.
Four things you should do now
- Make a list of your AI. Which AI tools do you use, for what, and with what data.
- Write an AI policy. What may be shared, what may not, and who approves new tools.
- Train employees by role. Everyone who uses AI gets a basic course. Management gets its own.
- Document it. Who, what, and when. An LMS does it automatically.
Skillflow has two ready-made courses: AI at work for all employees and AI Act for management. Each completion issues a certificate, and the platform reminds you about renewal on its own.
Sources