January 17, 2021

Volume XI, Number 17


January 15, 2021

Subscribe to Latest Legal News and Analysis

Denmark Implements Email Encryption Requirement, What Countries Will Follow?

On July 23, 2018, Denmark’s data protection agency announced that companies must encrypt all emails transmitting sensitive personal data.  This new rule goes into effect January 1, 2019, giving companies that do business in or with Denmark approximately five months to implement encryption technologies for their email systems.  This is a strict interpretation of Article 9 of GDPR; however, one facet of GDPR is that each European Union country can interpret and determine how companies must comply with the overarching GDPR principles and requirements.

By way of background, under Article 9 of GDPR, sensitive personal data includes the following information: a person’s racial or ethnic origin; political opinions; religious or philosophical beliefs; trade union membership; the processing of genetic data; the processing of biometric data for the purpose of uniquely identifying a natural person; data concerning health; data concerning a natural person’s sex life; and/or data concerning a person’s sexual orientation.  Further, processors cannot process this sensitive personal data unless one of the enumerated exceptions in Article 9 applies, such as explicit consent.

While Denmark is the first country to require encryption for this sensitive personal information, it would not be surprising if other countries follow suit.  Email encryption is becoming more common in in the United States as well as the default protection afforded to emails that contain sensitive information.

© Copyright 2020 Murtha CullinaNational Law Review, Volume VIII, Number 206



About this Author

Daniel Kagan, Murtha Cullina, health care attorney, regulatory compliance lawyer, reimbursement issue legal counsel

Mr. Kagan is an associate in the Health Care Group of Murtha Cullina.  He represents hospitals, physicians and other health care clients with a wide range of regulatory, compliance, risk management and reimbursement issues.

Prior to joining Murtha Cullina, Mr. Kagan clerked for the Honorable Lubbie Harper, Jr. and the Honorable Joseph H. Pellegrino of the Connecticut Appellate Court. 

Mr. Kagan received his J.D. with honors from the University of Connecticut Law School where he was a Notes and Comments Editor ...