Martin Sønnersgaard

Martin advises clients on the use and development of new digital solutions where, among other things, data protection and the requirements of the AI Regulation are to be integrated in a verifiable manner. For example, data protection impact assessments (DPIA), privacy by design by using self-service solutions, apps and artificial intelligence in automated decision-making systems (ADM) and as profiling or decision support. Martin is also very experienced in executing big compliance projects for public bodies and private businesses, including by assisting with the support of the necessary privacy program management and AI governance. He also assists with audits, drafting codes of conduct and cloud computing assistance, etc. Martin is an experienced and popular speaker at conferences and seminars on data protection. He is the head of the AI training "Responsible AI Governance & Compliance" of Poul Schmith, the Data Protection Network of Poul Schmith and Implement Consulting Group, and he is the head of the Network of Artificial Intelligence & Responsible Use of Data. Moreover, Martin has been appointed as a data protection officer (DPO) for the Danish Prime Minister's Office.

SELECTED PUBLISHED MATTERS

•    Assisting the Danish Agency for Public Finance and Management (Økonomistyrelsen) and the Danish Agency for Governmental IT Services (Statens IT) in a leading case on a DPIA regarding the Danish government's use of the cloud solutions Microsoft 365 and Microsoft Copilot for Microsoft 365.

•    Assisting Local Government Denmark (Kommunernes Landsforening) with the development of Local Government Denmark's legal AI toolbox with templates, tools and guidance on compliance with GDPR and the AI Regulation.

•    Representing a public authority in a leading criminal case on breach of the GDPR (in the district court and the high court).

•    Assisting the Capital Region of Denmark with data protection compliance in the IT solution Dermloop for digital skin cancer diagnostics.

•    Assisting the Capital Region of Denmark and others with data protection compliance in the PHAIR research project, which is one of Denmark's largest research projects aimed at developing new methods to detect potential side effects of vaccines and other medical treatment.

•    Assisting the Danish Agency for IT and Learning (Styrelsen for IT og Læring) with the preparation of the Guideline on lawful use of artificial intelligence by educational institutions.

•    Assisting SSI (Statens Serum Institut) with data protection compliance in the Danish Corona passport app during the Covid-19 pandemic.

•    Assisting the Danish Patient Safety Authority (Styrelsen for Patientsikkerhed) with data protection compliance in the Danish “stop contagion” app during the Covid-19 pandemic.

•    Assisting the Ministry of Urban, Rural and Church Affairs (By-, Land- og Kirkeministeriet) in a leading case on the preparation of Denmark's first code of conduct regarding data protection.

•    Assisting the Danish Ministry of Health (Sundhedsministeriet) and the Danish Life Science Cluster with the preparation of a report on the possibilities of sharing health data, including by using AI solutions.