Shopify privacy law · Denmark
Shopify cookie consent in Denmark
Datatilsynet (Danish DPA) requires Danish-language banners for Danish-language storefronts, expiry duration of every cookie disclosed, and named third parties reachable within one click. 84% of Danish sites are currently non-compliant per Cookie Information's 2026 report — enforcement is a stated 2026 priority.
Governing law: GDPR + Executive Order on Information and Consent in Electronic Communications (Cookie Executive Order)
Enforcement reality
Datatilsynet coordinates with Digitaliseringsstyrelsen (the Danish Digitisation Agency) — dual enforcement means both a data-protection track and a consumer-protection track for cookie violations. Datatilsynet's 2026 enforcement plan explicitly lists cookie consent as a priority. Recent guidance requires (a) the banner language to match the storefront language (Danish banner for Danish storefront), (b) each tracking technology to disclose its retention duration, and (c) named third-party recipients to be reachable within one click from the first-layer banner. Cookie Information's June 2026 sweep of the top 500 Danish sites found 84% non-compliant on at least one of these three points.
Regulator: Datatilsynet (Danish DPA)
Recent enforcement actions
- IDdesign (IKEA franchisee)·2019·DKK 1.5M (~€200K)
Retaining personal data of ~385,000 former customers longer than necessary
- Taxa 4x35·2019·DKK 1.2M (~€160K)
Retaining passenger data without lawful basis
What Shopify merchants must do in Denmark
- Banner must be in Danish if the storefront is served in Danish
- Each tracking technology must disclose its retention duration
- Named third-party recipients reachable within one click from the first layer
- Accept AND Reject on the first layer with equal prominence
- Consent log verifiable and exportable
- Privacy policy in Danish for Danish-language storefronts
- DSAR response within 30 days, free of charge
How Consentico handles Denmark
Consentico's geo-targeting detects Denmark visitors at the edge and applies the right banner — opt-in posture for EU/UK rules, with Google Consent Mode v2 signals and a per-decision audit log. The banner survives Shopify theme switches and uninstalls cleanly.
Related concepts
- GDPREU regulation governing how organisations process personal data of EU/EEA residents. Applies to any Shopify store with EU visitors.
- ePrivacy DirectiveEU directive (2002/58/EC, amended 2009) requiring opt-in consent for cookies and similar storage. Enforced together with GDPR.
- Consent (GDPR)Freely given, specific, informed, and unambiguous indication of agreement. No pre-checked boxes, no implied consent from continued browsing.
- DSARData Subject Access Request — when an EU/UK resident asks you for a copy of, or deletion of, their personal data.
Compliant in Denmark — in five minutes.
Free for stores under 5,000 banner views per month. No code, no theme edits.