Guides
Guides: Danish CPR numbers, GDPR and data protection
Short, practical answers referencing the law, the Danish Data Protection Agency and the CPR Office. Not legal advice.
Is the Danish CPR number sensitive data? CPR and GDPR
What section 11 of the Danish Data Protection Act says, and why CPR is “confidential”, not “sensitive”.
Can you send a CPR number by email?
The Danish DPA's encryption requirement, plus SMS and attachments.
CPR number sent or shared by mistake: handling the breach
The first 72 hours: stop the sharing, assess the risk, notify the DPA.
How to find CPR numbers in your files
Search Excel, Word and CSV, and why Excel stores CPR numbers without the zero and dash.
CPR numbers in SharePoint and OneDrive: GDPR in Microsoft 365
Why old sharing links are the risk, and what Business Basic and Standard lack.
Rules for storing CPR numbers
How long, where and how: data minimisation, deletion and access control.