Enforcing jurisdiction
Denmark · Geography does not establish applicable law.
Confirmed applicable legislation

The Conservative People’s Party – Complaint Upheld (Denmark, 2022)

Complaint Upheld
Datatilsynet (Norway)6 September 2022Denmark
final
Complaint Upheld

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

The Danish Conservative People's Party faced a complaint for how it handled sensitive information during an investigation into allegations against a member. The data protection authority upheld the complaint, emphasizing the need for proper legal bases when processing personal data.

What happened

The Danish DPA upheld a complaint against The Conservative People’s Party regarding the handling of personal data during an investigation.

Who was affected

Women who reported allegations and the accused party member were affected by the data processing.

What the authority found

The authority found that the party must ensure it has appropriate legal grounds for processing sensitive personal information.

Why this matters

This case underscores the importance of having a valid legal basis for processing sensitive data, especially in investigations. Organizations must be diligent in protecting individuals' privacy.

Recorded legal citations
Automatically processed
Art. 14 GDPR
Art. 6(1)(f) GDPR
Art. 9(2)(d) GDPR
Art. 9(2)(f) GDPR
View original scraped data
Art. 6(1)(f) GDPR
Art. 9(2)(d) GDPR
Art. 9(2)(f) GDPR
Art. 14(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

National Law Articles
AI-identified
§8(3)(2) Danish Data Protection Act

Entities Involved

The Conservative People’s Party
Plesner

Source checks

Linked-source text retrieved.

Automated check recorded — 19 March 2026.

Processing notes: national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

In July 2021, the Danish Conservative People's Party (controller) hired a law firm (processor) to investigate information published in the press about potential sexual violence by one of its high-profile members toward several women. As part of the legal investigation, the processor collected information through interviews with the women who reported the violence and the data subject himself. Later, in September 2021, after being excluded from the party and the parliamentary group, the data subject complained to the DPA. The processor explained to the DPA that it processed the data subject's information on several legal bases: # Information about the accusations: #* Article 6(1)(f) GDPR. Investigating the allegations was necessary for the controller's legitimate interest in deciding whether the data subject could continue to be the party and the parliamentary group member. # Information about (possible) criminal offences: #* [https://www.retsinformation.dk/eli/lta/2018/502 § 8 Section 3 sentence 2 of the Danish Data Protection Act] (Databeskyttelsesloven), according to which processing data about criminal offences may take place if necessary for safeguarding a legitimate interest and this interest clearly overrides the interests of the data subject. # Information about sexual relationships: #* Article 9(2)(d) GDPR. The controller is a not-for-profit political party and, therefore, can internally process information covered by Article 9 GDPR about its members for its legitimate activities. #* Article 9(2)(f) GDPR. Processing was necessary to establish, exercise or defend a legal claim. In this regard, the processor argued that the term "legal claim" should not be limited to current legal proceedings and may relate to actual or prospective court proceedings, obtaining legal advice, or establishing, exercising or defending legal rights in any other way. The processor also pointed out that the data subject received a general privacy policy from the controller when joini

Outcome

Complaint Upheld

A data subject complaint that was upheld by the DPA.

Related Enforcement Actions (0)

No other enforcement actions found for The Conservative People’s Party in DK

This is the only recorded action for this entity in this jurisdiction.

Details

Decision Date

6 September 2022

Authority

Datatilsynet (Norway)

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. The Conservative People’s Party - Denmark (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: