How Danish data protection law differs from the GDPR