Martin Sønnersgaard

Martin advises clients on the use and development of new digital solutions where, among other things, data protection and the requirements of the AI Regulation are to be integrated in a verifiable manner. For example, data protection impact assessments (DPIA), privacy by design by using self-service solutions, apps and artificial intelligence in automated decision-making systems (ADM) and as profiling or decision support. Martin is also very experienced in executing big compliance projects for public bodies and private businesses, including by assisting with the support of the necessary privacy program management and AI governance. He also assists with audits, drafting codes of conduct and cloud computing assistance, etc. Martin is an experienced and popular speaker at conferences and seminars on data protection. He is the head of Poul Schmith's AI training course "Responsible AI Governance & Compliance", Poul Schmith's and Implement Consulting Group's Data Protection Network, and he is the head of the Network of Artificial Intelligence & Responsible Use of Data. Moreover, Martin has been appointed as a data protection officer (DPO) for the Danish Prime Minister's Office. SELECTED MATTERS MADE PUBLIC • Assisted the Danish Agency for Public Finance and Management – Danish Ministry of Finance and the Danish Agency for Governmental IT Services in a leading case about a model impact assessment concerning data protection of the Danish State's use of the cloud solutions Microsoft 365 and Microsoft Copilot for Microsoft 365. • Assisted Local Government Denmark (KL) with drafting KL's legal AI toolbox with templates, tools and guidelines on compliance with the rules of the GDPR and the EU AI Act. • Represented a public authority in criminal proceedings of general public importance concerning violation of the GDPR (before a Danish district court and the Danish High Court). • Assisted the Capital Region of Denmark with ensuring that the IT solution Dermloop for skin cancer diagnostics complies with data protection law. • Assisted the Capital Region of Denmark and others with ensuring that the PHAIR research project, one of Denmark's biggest research projects aimed at developing new methods to detect potential side effects of vaccines and other medical treatment, complies with data protection law. • Assisted the Danish National Agency for IT and Learning with drafting "Vejledning om lovlig brug af kunstig intelligens for uddannelsesinstitutionerne" (in English: Guidelines on legal usage of artificial intelligence for educational institutions). • Assisted Statens Serum Institut (SSI) during the COVID-19 pandemic with ensuring that the Danish Coronapas app complied with data protection law. • Assisted the Danish Patient Safety Authority during the COVID-19 pandemic with ensuring that the Danish Smittestop app complied with data protection law. • Assisted the Danish Ministry of Housing, Rural Districts and Ecclesiastical Affairs in a leading case about drafting Denmark's first code of conduct concerning data protection. • Assisted the Danish Ministry of Health and Danish Life Science Cluster with drafting a report on the possibilities of sharing health data including the use of AI solutions.

SELECTED PUBLISHED MATTERS

•    Assisting the Danish Agency for Public Finance and Management (Økonomistyrelsen) and the Danish Agency for Governmental IT Services (Statens IT) in a leading case on a DPIA regarding the Danish government's use of the cloud solutions Microsoft 365 and Microsoft Copilot for Microsoft 365.

•    Assisting Local Government Denmark (Kommunernes Landsforening) with the development of Local Government Denmark's legal AI toolbox with templates, tools and guidance on compliance with GDPR and the AI Regulation.

•    Representing a public authority in a leading criminal case on breach of the GDPR (in the district court and the high court).

•    Assisting the Capital Region of Denmark with data protection compliance in the IT solution Dermloop for digital skin cancer diagnostics.

•    Assisting the Capital Region of Denmark and others with data protection compliance in the PHAIR research project, which is one of Denmark's largest research projects aimed at developing new methods to detect potential side effects of vaccines and other medical treatment.

•    Assisting the Danish Agency for IT and Learning (Styrelsen for IT og Læring) with the preparation of the Guideline on lawful use of artificial intelligence by educational institutions.

•    Assisting SSI (Statens Serum Institut) with data protection compliance in the Danish Corona passport app during the Covid-19 pandemic.

•    Assisting the Danish Patient Safety Authority (Styrelsen for Patientsikkerhed) with data protection compliance in the Danish “stop contagion” app during the Covid-19 pandemic.

•    Assisting the Ministry of Urban, Rural and Church Affairs (By-, Land- og Kirkeministeriet) in a leading case on the preparation of Denmark's first code of conduct regarding data protection.

•    Assisting the Danish Ministry of Health (Sundhedsministeriet) and the Danish Life Science Cluster with the preparation of a report on the possibilities of sharing health data, including by using AI solutions.