Denmark's cookie rules for app identifiers and analytics SDKs
Denmark applies the ePrivacy cookie rule through the Cookie Executive Order (cookiebekendtgørelsen, Executive Order No. 1148 of 9 December 2011), supervised by Digitaliseringsstyrelsen, the Danish Agency for Digital Government. Its guidance, prepared with Datatilsynet and last updated 16 May 2025, also covers app device identifiers such as an iPhone's UDID or Android's advertising ID. Cookies used for visitor statistics need prior consent, refusing must always be as easy as giving consent, and pre-ticked boxes or on-sliders do not produce valid consent. The guidance also says app users should be able to withdraw consent through easily accessible in-app settings. We keep analytics and attribution SDKs dormant until consent is stored, give the refuse option the same weight as accept, and add a privacy screen in settings. Both paths get tests, because an SDK initialised before the prompt is an easy defect to copy from vendor sample code.





