Danish Tax Administration – Reprimand (Denmark, 2026)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The Danish Tax Administration received a reprimand for taking too long to process access requests from individuals. The data protection authority noted that the agency improved its processing time but still failed to meet legal deadlines. This case serves as a reminder for public agencies to prioritize timely responses to data requests.
What happened
The Danish Tax Administration was reprimanded for slow processing of access requests from 2019 to 2024.
Who was affected
Individuals who submitted access requests to the Danish Tax Administration.
What the authority found
The data protection authority ruled that the agency did not comply with legal deadlines for processing access requests.
Why this matters
This reprimand highlights the importance of timely responses to data requests. Agencies must ensure they have enough resources to meet legal requirements.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Secondary-source text retrieved.
Automated check recorded — 18 October 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
In November 2024 the DPA started an investigation against the Danish Tax Administration (‘the controller’) for their processing time of access requests. 30 September 2025 the DPA reprimanded the controller for the processing time of access requests requested between 2019-2024, and ordered the controller to submit a statement informing how long the processing of access requests will take in 2025. 4 February 2026 the DPA received the requested report for the period of 2025. This revealed a decrease in processing time from 100 days to 59, and that the controller processes the requests in the order in which they are received. Similar to the period between 2019-2024, the controller emphasised that the processing times were a result of a lot of factors, such as case complexity, extensive documentation and log data related requests. The DPA emphasised that in accordance with Article 12(3) GDPR the controller is to respond to data subject’s requests without undue delay and latest within a month. Additionally, that the extension of the deadline pursuant to Article 12(3) GDPR and Recital 59 GDPR is dependent on the complexity and number of requests, and applies to individual requests which must be processed separately from other data subject’s requests. The DPA acknowledges that since executing a reprimand against the controller for the period of 2019-2024, the controller has reduced the average processing time from 100 days to 59 days in 2025. Regardless, the DPA once again held that the controller did not deal with a significant enough amount of access requests pursuant to Article 15 GDPR and within the deadline of Article 12(3) GDPR. The DPA held that the controller cannot extend deadline to process access requests pursuant to Article 12(3) GDPR on the grounds that they are also dealing with other requests, regardless of the complexity, number or time of receipt. The DPA further held that controllers must implement sufficient resources to be able to process data subject
Outcome
Reprimand
A formal reprimand: the DPA found a violation and issued a formal censure.
Related Enforcement Actions (0)
No other enforcement actions found for Danish Tax Administration in DK
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Danish Tax Administration - Denmark (2026). Retrieved from cookiefines.eu
Last updated: