AI regulation in Denmark: the EU AI Act (2026)

Yes. As an EU member, Denmark is covered by the EU AI Act (Regulation (EU) 2024/1689), which applies directly.

It uses a risk-based approach: unacceptable-risk AI is banned, high-risk AI faces strict obligations, and general-purpose AI models carry transparency duties.

It is phased: prohibitions applied from February 2025, general-purpose-AI rules from August 2025, and most high-risk obligations from August 2026.

Up to €35 million or 7% of global annual turnover for breaching the prohibited-AI rules, with lower tiers for other breaches.

As an EU member, Denmark applies Regulation (EU) 2024/1689 directly: the AI-literacy and prohibitions chapter has applied since 2 February 2025, GPAI obligations since 2 August 2025, and most high-risk system obligations (including conformity assessment under Art. 43) apply from 2 August 2026.

Lov nr. 467 af 14/05/2025 — 'Act on Supplementary Provisions to the AI Regulation' — was passed by the Folketing on 8 May 2025 and entered into force on 2 August 2025. It sets national competent authorities, supervision procedures, inspection and information-gathering powers, remedial orders, and administrative/criminal fines (with a 5-year limitation period) for breaches, in particular of the prohibited-practices chapter.

The Danish Agency for Digital Government (Digitaliseringsstyrelsen) is the coordinating national supervisory authority and single point of contact to the European Commission and AI Office; the Danish Data Protection Agency (Datatilsynet) and the Danish Court Administration (Domstolsstyrelsen) share market-surveillance responsibilities in their respective remits, with sectoral regulators competent for financial services, medical devices, etc.

Datatilsynet and the Agency for Digital Government run a joint AI regulatory sandbox (launched March 2024; second call closed April 2025) giving public and private organisations legal guidance on GDPR/AI Act compliance while developing AI. The Agency has also published three voluntary guides (for authorities, companies and citizens) on responsible AI use; a national AI sandbox under Art. 57 of the AI Act must be operational by 2 August 2026.

The all-party Digitalisation Strategy 2024-2027 (agreed February 2024, backed by ~DKK 800 million) contains 25 initiatives, several AI-specific: an AI Competence Pact, a Digital Taskforce for AI (Dec 2024) to accelerate AI in the public sector, and public-sector access to the NVIDIA-partnered 'Gefion' AI supercomputer via the Danish Centre for AI Innovation.

AI systems processing personal data remain subject to the GDPR and the Danish Data Protection Act, enforced by Datatilsynet, and to sectoral regimes (Finanstilsynet for financial services, the Danish Medicines Agency for medical devices/AI-as-MD, employment and consumer-protection rules). Copyright, product-liability and forthcoming EU rules (AI Liability Directive, revised PLD) complete the stack.