Processes voice recordings, in Denmark

Lov om beskyttelse af whistleblowere, § 9 og § 24 · Read the law's page

• If you run an internal whistleblower scheme, document each oral report either by recording the conversation or meeting after the whistleblower consents, or by accurate minutes that the whistleblower can check, correct and accept by signing (section 24, paragraph 1).
• For an oral report made through a telephone system, you can also document it by an accurate transcript of the conversation that the whistleblower can check, correct and accept by signing (section 24, paragraph 2).
• Set up an internal whistleblower scheme if you are an employer with 50 or more employees (section 9, paragraph 1).

Regulation (EU) 2024/1689, Arts. 5, 50 — directly applicable in Denmark as EU Member State; enforced via Law No. 467 of 14 May 2025

• Disclose that users are interacting with an AI chatbot or voice system.
• Mark synthetic generative AI outputs in a machine-readable format.

Forslag til Lov om produktansvar, L 32 (2026/1) · Read the law's page

• If you develop or make software, or have it developed or made, you answer as its manufacturer, unless it is free open-source software that you develop or supply outside commercial activity (Secs. 1(2), 3 point 1 and 3 point 10).
• Keep supplying the software updates and upgrades needed to keep the product safe while the product is within your control: a defect caused by software, by an update or upgrade, or by a missing necessary update is not excused because it arose after you put the product into circulation (Secs. 3 point 5 and 12(2)).
• Meet the product safety requirements that apply to your product, safety-relevant cybersecurity requirements included: they count in judging whether it is defective (Sec. 6(2) point 6), and failing a mandatory requirement that protects against the damage suffered presumes it defective (Sec. 11(2) point 2).
• Account for what your product learns or acquires after it is put into circulation: the effect of that ability is weighed in judging whether it is defective (Sec. 6(2) point 3).
• Keep records you could produce if a court orders disclosure on a claimant's supported request, because failing to comply with the order presumes the product defective (Secs. 10(1), 11(2) point 1).
• If you are a manufacturer established outside the European Union, your importer and your authorized representative answer as the manufacturer would, and where there is neither, the provider of distribution services answers (Sec. 7(1) point 3).
• If you substantially modify a product outside the manufacturer's control and then make it available on the market or put it into use, you answer as its manufacturer (Sec. 7(2)).
• If you are a distributor, or an online platform that lets consumers conclude distance contracts with traders, identify the operator established in the European Union or your own supplier within a month of the injured person's request, or you answer for the product (Sec. 7(3) and (4)).
• Do not rely on a contract term to limit or exclude your liability to an injured person, because the Act cannot be departed from to the injured person's detriment (Sec. 2).
• Be ready to prove a Section 12 defense: that you did not put the product into circulation, that the defect probably did not exist then, that it results from compliance with legal requirements, or that the objective scientific and technical knowledge then did not allow the defect to be discovered (Sec. 12(1)).
• If you integrate software made by a micro or small enterprise as a component, a recourse waiver agreed with that enterprise removes your recourse against it (Sec. 13(4)).
• Claims are time-barred 3 years after the injured person knew or should have known of the damage, the defect and the liable operator, and the right expires 10 years after the product was put into circulation or into use, or 25 years for a latent personal injury (Secs. 15 and 16).