Denmark is a member of the European Union and consistently ranks as one of the most digitally advanced nations in the world. The country applies the GDPR alongside the national Danish Data Protection Act (Databeskyttelsesloven), which replaced the former Act on Processing of Personal Data in 2018. The national supervisory authority is Datatilsynet — the Danish Data Protection Agency. Denmark has a highly digitalized society, with widespread use of platforms like Facebook, Instagram, LinkedIn, and the local marketplace DBA.dk. Whether you want to verify an online date, investigate a suspicious seller, or protect your own photographs from impersonators, understanding Danish privacy law is essential before using any face search engine. For a comparison with another Nordic country, see our guide to face search in Sweden.
Face Search in Denmark Overview
Face search allows you to upload a photograph to a face search engine and receive a list of public web pages where the same face appears. In Denmark, this technology is used for identity verification, dating safety, marketplace fraud prevention, and personal image protection. Danish law treats facial images processed for the purpose of uniquely identifying a person as biometric data, a special category of personal data under Article 9 of the GDPR. Processing biometric data is prohibited in principle unless a narrow exception applies — most commonly the explicit consent of the data subject or processing necessary for reasons of substantial public interest. Datatilsynet has emphasized that biometric systems must be proportionate, necessary, and transparent, and that less intrusive alternatives should always be considered first. To understand how the underlying technology works, read our complete guide to facial recognition.
Datatilsynet and Danish Enforcement
Datatilsynet is Denmark's independent data protection authority. It enforces both the GDPR and the Danish Data Protection Act, investigates complaints, issues guidance, and has the power to impose administrative fines of up to 20 million euros or 4% of global annual turnover, whichever is higher. The Danish authority has been active in scrutinizing biometric processing, particularly in employment and access control contexts. Datatilsynet has issued guidance clarifying that employers cannot use facial recognition for time-and-attendance tracking without meeting strict GDPR requirements, and that the use of biometric access control systems in workplaces requires a careful proportionality assessment. The authority has also addressed the use of CCTV cameras with facial recognition capabilities, ruling that continuous biometric monitoring in commercial settings is generally disproportionate. Datatilsynet has warned about the risks of face search tools that build permanent biometric databases, noting that such practices may violate the GDPR's storage limitation and purpose limitation principles.
GDPR and the Danish Data Protection Act
The GDPR applies directly in Denmark and is supplemented by the Danish Data Protection Act (Databeskyttelsesloven), which fills in areas where the GDPR allows member-state discretion. The core principles relevant to face search mirror those across the EU: lawfulness, fairness, and transparency; purpose limitation; data minimization; and storage limitation. Because facial data is a special category, controllers need both an Article 6 lawful basis and an Article 9 exception. For face search, this typically means explicit consent. Datatilsynet expects organizations to conduct a Data Protection Impact Assessment (DPIA) before processing biometric data at scale. The Danish act also includes provisions specific to the Danish context, such as rules on processing personal data for journalistic purposes, the processing of data in the context of employment, and specific conditions for processing data by public authorities and in the healthcare sector.
Legal Use Cases in Denmark
- Online dating safety — verifying that a match on Tinder, Bumble, or a Danish dating platform is using authentic photos
- Marketplace fraud prevention — checking whether a seller on DBA.dk or GulogGratis is using stolen images
- Identity verification — confirming the identity of freelancers, contractors, or online business contacts
- Personal image protection — discovering whether your own photos are being misused by impersonators
- Journalistic and OSINT research — verifying subjects in stories of public interest
- Corporate due diligence — vetting counterparties before cross-border transactions in Denmark's maritime and life sciences sectors
How to Use Face Search Responsibly in Denmark
Using reverse face search responsibly in Denmark means choosing a tool that respects both the GDPR and Datatilsynet's guidance. A compliant service deletes uploaded photos immediately after processing, does not retain facial templates, and does not build a permanent biometric database. The GDPR's household exemption may cover an individual using face search for purely personal activities — such as verifying a dating match or checking whether their own photos are being misused — but Datatilsynet and the Court of Justice of the European Union interpret this exemption narrowly. If the activity extends beyond the purely personal sphere, full GDPR compliance is required, including a lawful basis and an Article 9 exception. Danish users should also be mindful of the country's strong cultural emphasis on trust and transparency, and of the constitutional protections for personal privacy. Always use results ethically: do not stalk, harass, or discriminate. To find someone by photo today, try facesearching by visiting the facesearching home page.
Danish Privacy Rights and Redress
Danish residents enjoy the full suite of GDPR rights: access, rectification, erasure, restriction, data portability, and objection. The Danish Data Protection Act adds national specifics, including provisions on how public authorities handle personal data and how image rights interact with privacy obligations. Datatilsynet operates an accessible complaints mechanism, and individuals can file complaints online without legal representation. The authority has demonstrated a willingness to enforce against biometric data violations, particularly in employment and retail contexts. If a face search service processes your facial data in violation of the law, you have the right to seek redress through Datatilsynet and the Danish courts. For more on safeguarding your online presence, see our guide to protecting your digital identity.
Denmark's Datatilsynet has ruled that biometric access control and time-and-attendance facial recognition in workplaces require strict proportionality assessments — any face search engine serving Danish users must delete uploads and never retain biometric templates.