Cold Email Laws in Denmark: Every Sending Domain Is a Separate Fine

September 5, 2026. Denmark's spam rule is one sentence long and it contains no exception for business recipients: a trader may not contact anyone by email for direct marketing without prior consent. The Consumer Ombudsman's guidance says the word "anyone" means consumers, companies and public authorities alike, and that it makes no difference whether the address is [email protected] or the managing director's personal mailbox. What most write-ups miss is how the fines are counted. The prosecution service's tariff treats each campaign and each sender identity as a separate count with its own minimum, which means the standard cold-email setup of one campaign across ten rotating domains is priced as ten offences before a single reply arrives.

The rule: Section 10 of the Marketing Practices Act

The current consolidation is Act No. 1420 of 2 December 2024. Section 10(1) prohibits a trader from contacting anyone by electronic mail, automated calling system or fax for direct marketing without prior consent, and requires that the person be told, before consenting, that consent can be withdrawn easily and free of charge. Section 10(3) requires that marketing be identifiable as such, that the party on whose behalf it is sent is not concealed, and that the message carries an address for stopping further messages. The Consumer Ombudsman's spam guidance fills in the meaning.

1. No B2B carve-out. The guidance derives this from "anyone" in the text and states it applies to consumers, companies and public authorities. A May 2025 decision adds that it is irrelevant whether the address is publicly available.
2. Named and generic addresses are treated identically. The Ombudsman's own text says it is without significance whether the message goes to info@ or to a named director or employee.
3. "Marketing" is wide. Offers, newsletters, event invitations and pure brand messaging all count. Neutral service messages, neutral surveys and a plain logo or website link in a signature do not. Under the Ombudsman's practice an email offering the recipient a job is not spam.
4. Asking for consent by email is itself marketing. The guidance says so, and the Ombudsman applied it in May 2026 to car dealers who followed oral consent with a "confirm your consent" SMS or email.
5. The existing-customer exception has seven conditions. An actual purchase, not a download or a free consultation; the customer supplied the address personally; clear notice that marketing would follow; an opt-out at collection and in every message; the sender's own products only, with no partners or subsidiaries; and "similar" products read narrowly, so shampoo does not license perfume.
6. Foreign senders are inside the rule. Marketing aimed at Danish recipients is governed by Danish law regardless of where the company is established. The Ombudsman applied this to an English company in 2025.
7. Negligence is enough, and buying consents does not shift liability. A lead vendor's promise of consented contacts leaves the sender liable.

How the fines are counted

Section 37(3) makes a breach of Section 10 punishable by a fine, and Section 37 directs that fines for Section 10(1) be measured by the violation's duration or extent. The actual numbers come from the Director of Public Prosecutions' notice on marketing offences, which the Ombudsman applies when it settles cases by administrative fine. For violations from January 1, 2022: 1 to 30 contacts, DKK 20,000 per count; 31 to 50, DKK 30,000; 51 to 100, DKK 50,000; over 100, DKK 50,000 plus DKK 200 for every contact from the 101st. A second offence adds 20 percent. The notice's own worked example prices 500 complaints in one count at DKK 130,000. Before 2022 the tariff was DKK 10,000 for up to 100 messages and DKK 100 per message above that, so a 100-email send became five times more expensive overnight.

The counting rule is the part that matters for outbound teams. Each campaign is a separate count, and each sender identity is a separate count. Ten sending domains carrying one campaign is ten counts, each with its own DKK 20,000 floor: DKK 200,000 for a campaign that produced one complaint per domain. Where consumers in two or more other EU states are harmed, Section 37(8) caps the fine at 4 percent of turnover in the affected states or EUR 4 million.

What the Ombudsman has actually done

Recent published cases are modest in money and instructive in reasoning. A webshop that auto-subscribed a buyer to its newsletter accepted a DKK 20,000 administrative fine in November 2023 after refusing to say how many people were affected; the trade association Dansk Erhverv called it the first fine under the new tariff. In May 2025, 25 people complained about emails inviting business leaders to a conference with a free ticket; a Danish company and an English company were held jointly responsible, neither could document consent, and the outcome was a formal warning rather than a fine. In August 2025 an advance ruling held that "beauty products" is not one similar-product category and that a pre-ticked box cannot replace consent. In May 2026 three car dealers were told that their consent-confirmation messages were themselves marketing. The record fines are older: DKK 964,600 against a fibre company in 2020 for 9,646 messages, and DKK 800,000 against a training institute in 2019 for more than 38,500 emails.

The Danish Data Protection Agency's June 2023 guidance defers to the Ombudsman on the spam ban and adds one point for B2B: because Section 10(1) demands consent for email, processing a sole trader's address pulled from the company register for an email campaign should also rest on consent under GDPR, not legitimate interest.

What it means for operators

Denmark is not a market where a clever B2B argument helps. The rule is opt-in for everyone, the Ombudsman has written down that named and generic addresses are the same, and the one recent B2B case, a business conference invitation, ended in a warning only because the companies changed course. The decision to send cold email into Denmark is a decision to send to consenting contacts or to accept a tariffed fine.

If you do send, the architecture matters more than the copy. Rotating sending domains, the default in every modern cold email infrastructure, multiplies your exposure under the counting rule, so a Danish segment should run from a single sender identity. Consent should be collected through a channel you are allowed to use, never by email, and the seven-condition customer exception should be checked against the date and nature of the purchase, not the age of the relationship. Keep in mind that job offers are outside the rule under the Ombudsman's practice, which is why recruitment outreach into Denmark works where sales outreach does not.

Checklist for Danish sends

1. Consent first, from a permitted channel. Email requests for consent are marketing.
2. One sender identity per campaign. Every extra domain is a separate count with a DKK 20,000 floor.
3. Identify the sender and include a stop address in every message, per Section 10(3).
4. Audit the customer exception against all seven conditions, especially "own products" and "similar".
5. Assume Danish law applies wherever you are established.

Denmark's neighbour runs a different regime, covered in our Sweden guide, and the practical market notes are in cold email in Sweden and Finland. For Danish prospects, the compliant route is usually a consented list built through events, content and referrals, then sent from a single identity, which is how our cold email service structures Nordic segments.