On June 29, 2018, the Danish Data Protection Agency (Datatilysnet), in cooperation with the Ministry of Justice, published a guide on Article 25 (Data protection by design and by default) and Article 32 (Security of processing) of the General Data Protection Regulation (GDPR), to reflect the practical reality within which businesses and public authorities operate.