Denmark: technology regulation at a glance

Framework: EU Markets in Crypto-Assets Regulation (MiCA, Regulation (EU) 2023/1114) with national implementation; Danish Financial Supervisory Authority (Finanstilsynet/DFSA) designated as the competent authority. AML/CFT obligations under the Danish AML Act (Hvidvaskloven) implementing EU AMLD; tax treatment under the Danish Tax Assessment Act administered by Skattestyrelsen.

Crypto is legal in Denmark and now governed by the EU's MiCA regime, which applied in full from 30 December 2024, with Finanstilsynet as the competent authority for licensing and supervising crypto-asset service providers (CASPs) and stablecoin issuers. Denmark uses the maximum 18-month transitional period (existing operators may continue until 1 July 2026 if they applied by 30 December 2025) and is widely seen as taking a strict interpretive line, particularly on DeFi exemption claims. Tax treatment is unsettled: speculative gains are currently taxed as personal income (up to ~52%) while a Tax Law Council proposal for a 42% mark-to-market tax on unrealised gains remains under political review and is not in force.

Framework: EU AI Act (Regulation (EU) 2024/1689) + Danish Act No. 467 of 14 May 2025 on Supplementary Provisions to the AI Regulation (in force 2 August 2025); Digitaliseringsstyrelsen (Danish Agency for Digital Government) as national coordinating supervisory authority

As an EU member state, Denmark is directly bound by the EU AI Act, whose prohibitions and general-purpose AI rules are already applicable and whose main high-risk obligations phase in on 2 August 2026. Denmark adopted Act No. 467 of 14 May 2025 supplementing the AI Regulation — designating national competent authorities, market-surveillance powers, inspection rights and sanctions — making it one of the first EU states to legislate national implementation. The Danish Agency for Digital Government (Digitaliseringsstyrelsen) is the single point of contact and lead supervisor, working with the Data Protection Agency (Datatilsynet) and the Court Administration (Domstolsstyrelsen), and jointly operates a Datatilsynet-led AI regulatory sandbox.

Framework: EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) as supplemented nationally by the Danish Data Protection Act (Consolidated Act No. 289 of 8 March 2024); sector rules include the TV Surveillance Act and Executive Order No. 1148/2011 on cookies. Supervisory authority: Datatilsynet (Danish Data Protection Agency).

As an EU member state, Denmark applies the GDPR directly, supplemented by the Danish Data Protection Act (most recently consolidated as Act No. 289 of 8 March 2024), which entered into force alongside the GDPR on 25 May 2018 and adds Danish-specific rules on CPR numbers, CCTV, journalism, digital-consent age and derogations for public tasks. The Danish Data Protection Agency (Datatilsynet) is the independent supervisory authority; ePrivacy/cookie rules are supervised separately by the Digitaliseringsstyrelsen. Uniquely in the EU, Datatilsynet cannot itself impose administrative GDPR fines: penalties are pursued through the criminal courts, though the DPA issues binding orders, reprimands and recommends fines.

Framework: Danish Payments Act ('Lov om betalinger') implementing PSD2 and the E-Money Directive (EMD2), supervised by Finanstilsynet (Danish FSA); EU MiCA applies to crypto-asset services. BNPL/consumer credit governed by the Consumer Loan Undertakings Act and Credit Agreements Act.

Denmark operates a clear, in-force licensing regime for payments and fintech. Payment institutions and e-money institutions must be authorised by Finanstilsynet under the Danish Payments Act, which transposes the EU PSD2 and E-Money frameworks, and PSD2-based open banking (access to accounts via APIs) is enforced. Crypto-asset service providers fall under the EU MiCA Regulation (fully applicable since 30 December 2024) and BNPL credit was brought within the consumer-credit licensing regime in July 2023.

Framework: Denmark has no dedicated digital-nomad or remote-work visa. Immigration for third-country nationals is governed by the Danish Aliens Act (Udlændingeloven) and administered by SIRI (Styrelsen for International Rekruttering og Integration / Danish Agency for International Recruitment and Integration) under nyidanmark.dk. EU/EEA/Swiss citizens enjoy free movement.

Denmark does not offer a dedicated digital-nomad visa, and remote work for a foreign employer while on a Schengen short stay is not permitted. Non-EU relocators must use conventional routes — chiefly the salary-based Pay Limit Scheme, the shortage-based Positive Lists, or the Start-up Denmark entrepreneurship scheme — all requiring either a Danish employer contract or an approved Danish business. There is no golden-visa or residency-by-investment programme.

Framework: EU Digital Services Act (DSA) — nationally enforced via the Danish Act on the enforcement of Regulation (EU) 2022/2065 (signed 28 Dec 2023, in force 17 Feb 2024). Danish Agency for Digital Government (Digitaliseringsstyrelsen) is the Digital Services Coordinator (DSC). Complemented by NIS2 (Danish NIS2 Act, in force 1 July 2025), a Copyright Act amendment targeting deepfakes (2025), and a national social-media age limit of 15 (political agreement Nov 2025; implementation via DSA Art. 28 age-assurance and the Danish digital identity wallet).

Denmark regulates online content and safety primarily through the directly-applicable EU Digital Services Act, transposed for enforcement by a dedicated 2024 national act designating the Danish Agency for Digital Government as Digital Services Coordinator with inspection, data-access and fining powers. On top of this baseline, Denmark has adopted NIS2 cybersecurity rules, is legislating a copyright-based protection against AI deepfakes, and reached a broad political agreement in November 2025 to introduce a national minimum age of 15 for social-media accounts (13 with parental consent), enforced via DSA Article 28 obligations and the national eID wallet.

Framework: Danish NIS2 Act (Act No. 434 of 6 May 2025 on Measures for a High Level of Cybersecurity — 'Cybersikkerhedsloven'), transposing EU Directive 2022/2555; supplemented by sector-specific acts (telco Act No. 435/2025, plus energy and finance rules) and the CER Act (Act on the Resilience of Critical Entities); DORA (Reg. (EU) 2022/2554) applies directly to financial entities. Baseline oversight sits with the Danish Resilience Agency (SAMSIK) under the Ministry of Resilience and Preparedness (est. 29 Aug 2024); the Centre for Cyber Security (CFCS, under the Danish Defence Intelligence Service) remains national CSIRT.

Denmark has a comprehensive, in-force cybersecurity regime: the NIS2 Act (Act No. 434/2025) and CER Act both entered into force on 1 July 2025, alongside sector-specific implementations for telecoms, energy and finance. Supervision is deliberately decentralised — each sector's regulator acts as competent authority, coordinated by SAMSIK (Danish Resilience Agency) under the new Ministry of Resilience and Preparedness, while CFCS operates the national CSIRT. In finance, DORA has applied directly since 17 January 2025 with Finanstilsynet as competent authority.

Framework: Danish Companies Act (Selskabsloven) administered by the Danish Business Authority (Erhvervsstyrelsen); digital incorporation via virk.dk; FDI screening under the Investment Screening Act (Act No. 842/2021) for sensitive sectors

Denmark is one of the easiest places in the EU to start a company: foreigners can own 100% of a Danish entity, incorporation is fully digital through the Danish Business Authority's virk.dk portal, and a CVR (company number) is typically issued within minutes once documents and capital are in place. The minimum share capital for a private limited company (ApS) was halved from DKK 40,000 to DKK 20,000, effective 27 February 2025, further lowering the barrier to entry. Sector-neutral registration is not restricted, but foreign investments in certain sensitive sectors (defence, dual-use, critical infrastructure/tech) require prior authorisation under the Investment Screening Act.