Cybersecurity Policy Report, Privacy Agency Given AI Enforcement Duties in Denmark, (Aug 25, 2025)

By Tony Foley

Datatilsynet, the Danish DPA, has been appointed as the supervisory authority responsible for implementing two specified provisions of the European Union’s AI Act related to issues within its institutional expertise.

In a news release Friday announcing the appointment, Datatilsynet said it would supervise compliance with the following rules on prohibited practices under article 5 of the AI Act:

Criminal offenses: Article 5(1)(d) of the AI Act prohibits the use of AI systems to carry out risk assessments of natural persons to predict the risk of a natural person committing a criminal offense, based solely on profiling a natural person or conducting an assessment of their personality traits and personal characteristics.

Biometrics. Article 5(1)(g) of the AI Act prohibits the use of AI systems for purposes of biometric categorization to infer race, political opinions, trades union membership, religious or philosophical beliefs, sexual relations, or sexual orientation.

The agency noted that the right to complain and the obligation to report serious incidents under the AI Act would not enter into effect until Aug. 2, 2026. In the meantime, Datatilsynet is available to answer inquiries and will bring cases on its own initiative.

News: InternationalLegislation DataPrivacy