Danish Data Protection Agency on-site inspection

Here you can find information on what you must do in the event of a Danish Data Protection Agency on-sit inspection. 

---

There are two types of Data Protection Agency on-site inspections:

1. Scheduled on-site inspections: Each year, the Data Protection Agency selects certain fields, sectors or types of organisations for on-site inspection.
2. Ad hoc on-site inspection: The Data Protection Agency can decide to performs an on-site inspection on the basis of a specific event.

The Data Protection Agency has two instruments at its disposal in connection with an on-site inspection. The Data Protection Agency may demand that information to be supplied directly by the data controller, and/or the Data Protection Agency is entitled (without a court order) to demand access to all premises where personal data is processed. In practice, this means that prior to an on-site inspection, the Data Protection Agency may demand answers to some questions.

In ordinary cases, the Data Protection Agency will give advance notice and present photographic proof of identity from the Data Protection Agency in connection with a visit.

If you have any questions concerning an on-site inspection of your unit, please contact your immediate supervisor or the data protection officer at AU – dpo@au.dk.