Securiti leads GigaOm's DSPM Vendor Evaluation with top ratings across technical capabilities & business value.

View

Denmark New Guidance (Quick Guide) on Cookies

Download: Consent Report Q2 2024
Published March 2, 2021 / Updated November 27, 2024
Author

Maria Khan

Data Privacy Legal Manager at Securiti

FIP, CIPT, CIPM, CIPP/E

Listen to the content

On 12 February 2021, the Danish Data Protection Authority (Datatilsynet) published a Quick Guide on the use of cookies outlining compliance action items for organizations that use cookies. The Guide clarifies that the user’s consent must be obtained before the use of non-necessary cookies as set out in the European Union’s e-Privacy Directive. It reaffirms that for consent to be valid, it must be freely given, specific, informed, and an unambiguous indication of the user’s wishes.

Under the new Quick Guide, organizations have the following responsibilities in connection to the use of cookies:

  1. Do not process any non-necessary cookies without the user’s prior consent:
    The user’s consent must be obtained prior to setting non-necessary cookies. The necessary cookies should be interpreted narrowly and are only those that are essential for the functioning of the website, for example, cookies that are used to remember the content of a shopping cart.
  2. Obtain active consent of the user:
    An active and positive action must take place for consent to be considered valid. The use of pre-ticked checkboxes does not constitute active consent. Similarly, simply navigating on a website does not mean that the user has accepted the use of cookies.
  3. Provide equal opportunity to accept and reject the use of cookies:
    Organizations must make clear to users that they can refuse to consent to the use of cookies. Users should not be misguided/nudged via button sizes, colors, or locations and the first information layer of the cookie consent banner must include the option to refuse to consent to the use of cookies and not just have “yes” and “more information” buttons.
  4. Allow cookie selection by categories:
    Organizations must allow users to select and deselect individual cookie categories based on their purposes.
  5. Provide sufficient information to users:
    Organizations must provide users with the information about the use of cookies, their purposes, and the expiry dates of cookies, as well as information on parties that are processing cookies and what information is transmitted to parties.
  6. Ensure easy withdrawal of cookies:
    Users must have the ability to revoke their consent at any time, through a process that is just as straightforward as giving it.
  7. Document consent:
    Organizations must document consent for the purposes of compliance.
  8. Inform about any alternative legal bases used for subsequent processing:
    Practically, consent is the right legal base for the use of cookies. However, any alternative legal base used for the subsequent processing of personal data should be stated either in the cookie declaration/banner or in the privacy notice. The use of any alternative legal base requires a concrete assessment of the purpose and disclosure of personal data.

Denmark is considered an opt-in cookie consent regime, wherein user’s consent is required before the processing of cookies. Securiti’s Cookie Consent Management Solution can help organizations deploy cookie consent banners in accordance with the afore-mentioned compliance requirements.

Ask for a DEMO to understand how Securiti can help you comply with Danish latest Quick Guide on Cookies, GDPR, and a whole host of other global privacy laws and regulations, with ease.

ccpa do not sell

Schedule Your
Personal Demo

Learn how you can leverage Securiti’s Data Command Center to address data security, privacy, governance, and compliance.

See a demo
Schedule your demo today
Join Our Newsletter

Get all the latest information, law updates and more delivered to your inbox


Share

More Stories that May Interest You

AI Powered
Security | PrivacyOps | Governance | Compliance

for Multicloud, SaaS and Self Managed Data Systems & Apps

See a Demo
Bedrock of Privacy
Videos
View More
Mitigating OWASP Top 10 for LLM Applications 2025
Generative AI (GenAI) has transformed how enterprises operate, scale, and grow. There’s an AI application for every purpose, from increasing employee productivity to streamlining...
View More
Top 6 DSPM Use Cases
With the advent of Generative AI (GenAI), data has become more dynamic. New data is generated faster than ever, transmitted to various systems, applications,...
View More
Colorado Privacy Act (CPA)
What is the Colorado Privacy Act? The CPA is a comprehensive privacy law signed on July 7, 2021. It established new standards for personal...
View More
Securiti for Copilot in SaaS
Accelerate Copilot Adoption Securely & Confidently Organizations are eager to adopt Microsoft 365 Copilot for increased productivity and efficiency. However, security concerns like data...
View More
Top 10 Considerations for Safely Using Unstructured Data with GenAI
A staggering 90% of an organization's data is unstructured. This data is rapidly being used to fuel GenAI applications like chatbots and AI search....
View More
Gencore AI: Building Safe, Enterprise-grade AI Systems in Minutes
As enterprises adopt generative AI, data and AI teams face numerous hurdles: securely connecting unstructured and structured data sources, maintaining proper controls and governance,...
View More
Navigating CPRA: Key Insights for Businesses
What is CPRA? The California Privacy Rights Act (CPRA) is California's state legislation aimed at protecting residents' digital privacy. It became effective on January...
View More
Navigating the Shift: Transitioning to PCI DSS v4.0
What is PCI DSS? PCI DSS (Payment Card Industry Data Security Standard) is a set of security standards to ensure safe processing, storage, and...
View More
Securing Data+AI : Playbook for Trust, Risk, and Security Management (TRiSM)
AI's growing security risks have 48% of global CISOs alarmed. Join this keynote to learn about a practical playbook for enabling AI Trust, Risk,...
AWS Startup Showcase Cybersecurity Governance With Generative AI View More
AWS Startup Showcase Cybersecurity Governance With Generative AI
Balancing Innovation and Governance with Generative AI Generative AI has the potential to disrupt all aspects of business, with powerful new capabilities. However, with...

Spotlight Talks

Spotlight 11:29
Not Hype — Dye & Durham’s Analytics Head Shows What AI at Work Really Looks Like
Not Hype — Dye & Durham’s Analytics Head Shows What AI at Work Really Looks Like
Watch Now View
Spotlight 11:18
Rewiring Real Estate Finance — How Walker & Dunlop Is Giving Its $135B Portfolio a Data-First Refresh
Watch Now View
Spotlight 13:38
Accelerating Miracles — How Sanofi is Embedding AI to Significantly Reduce Drug Development Timelines
Sanofi Thumbnail
Watch Now View
Spotlight 10:35
There’s Been a Material Shift in the Data Center of Gravity
Watch Now View
Spotlight 14:21
AI Governance Is Much More than Technology Risk Mitigation
AI Governance Is Much More than Technology Risk Mitigation
Watch Now View
Spotlight 12:!3
You Can’t Build Pipelines, Warehouses, or AI Platforms Without Business Knowledge
Watch Now View
Spotlight 47:42
Cybersecurity – Where Leaders are Buying, Building, and Partnering
Rehan Jalil
Watch Now View
Spotlight 27:29
Building Safe AI with Databricks and Gencore
Rehan Jalil
Watch Now View
Spotlight 46:02
Building Safe Enterprise AI: A Practical Roadmap
Watch Now View
Spotlight 13:32
Ensuring Solid Governance Is Like Squeezing Jello
Watch Now View
Latest
View More
Databricks AI Summit (DAIS) 2025 Wrap Up
5 New Developments in Databricks and How Securiti Customers Benefit Concerns over the risk of leaking sensitive data are currently the number one blocker...
Inside Echoleak View More
Inside Echoleak
How Indirect Prompt Injections Exploit the AI Layer and How to Secure Your Data What is Echoleak? Echoleak (CVE-2025-32711) is a vulnerability discovered in...
What Is Data Risk Assessment and How to Perform it? View More
What Is Data Risk Assessment and How to Perform it?
Get insights into what is a data risk assessment, its importance and how organizations can conduct data risk assessments.
What is AI Security Posture Management (AI-SPM)? View More
What is AI Security Posture Management (AI-SPM)?
AI SPM stands for AI Security Posture Management. It represents a comprehensive approach to ensure the security and integrity of AI systems throughout the...
Beyond DLP: Guide to Modern Data Protection with DSPM View More
Beyond DLP: Guide to Modern Data Protection with DSPM
Learn why traditional data security tools fall short in the cloud and AI era. Learn how DSPM helps secure sensitive data and ensure compliance.
Mastering Cookie Consent: Global Compliance & Customer Trust View More
Mastering Cookie Consent: Global Compliance & Customer Trust
Discover how to master cookie consent with strategies for global compliance and building customer trust while aligning with key data privacy regulations.
View More
Key Amendments to Saudi Arabia PDPL Implementing Regulations
Download the infographic to gain insights into the key amendments to the Saudi Arabia PDPL Implementing Regulations. Learn about proposed changes and key takeaways...
Understanding Data Regulations in Australia’s Telecom Sector View More
Understanding Data Regulations in Australia’s Telecom Sector
Gain insights into the key data regulations in Australia’s telecommunication sector. Learn how Securiti helps ensure swift compliance.
Gencore AI and Amazon Bedrock View More
Building Enterprise-Grade AI with Gencore AI and Amazon Bedrock
Learn how to build secure enterprise AI copilots with Amazon Bedrock models, protect AI interactions with LLM Firewalls, and apply OWASP Top 10 LLM...
DSPM Vendor Due Diligence View More
DSPM Vendor Due Diligence
DSPM’s Buyer Guide ebook is designed to help CISOs and their teams ask the right questions and consider the right capabilities when looking for...
What's
New