Close this search box.

General Data Protection Regulation (GDPR) – It is now a reality

As GDPR rolls out, Acubiz celebrates two years of proactive preparation. With expert guidance from the Horten law firm, Acubiz navigated complex data agreements, highlighting the challenges of varied GDPR interpretations across EU countries. Adaptation remains key in this evolving data protection realm.
coworkers listening at a presentation


As of 25th May GDPR is now a reality. Acubiz looks back at two years of getting ready for this day. The law firm Horten has played an important role as adviser for the preparation of Acubiz’ data processing agreements – a process, which Acubiz’ CEO & Founder Lars de Nully initiated early on.

Partner of Horten law firm, Mads Nygaard Madsen tells that “The approach Lars de Nully has had to the GDPR is highly ideal – to see it as an opportunity rather than a burden.” Already two years ago, the two of them began outlining Acubiz’ data processing agreement, which was early compared to other organisations.

Affecting many areas

“Here at Horten we have tried to start early as well, to create a strong personal data team that can advise our clients about the regulation. The team is among others represented by employees with different competencies within fields of IT law, employment law and laws of marketing. The General Data Protection Regulation affects so many areas, so you need to have certain knowledge – especially as a law firm”, Mads Nygaard Madsen says.

Ups and downs along the way

“The process has not been willingly driven,” Lars de Nully tells, “but when I found out that it was inevitable to prepare Acubiz for the new regulation, I decided to get to work and thought that it must be a competitive advantage to be at the forefront of this process. From a managerial perspective, there have been ups and downs along the way in relation to the experience of the value of all the resources we had to invest in the project. But now, when Acubiz is completely ready, and has been since January and has data-processing agreements with almost all customers – it is very sufficient, “says Lars de Nully.

One standard agreement is not enough

Unfortunately, it is not enough with just one standard data processing agreement – the content of the contract, the negotiations and adjustments varies from customer to customer Mads Nygaard Madsen says:

“On behalf of Acubiz we have now prepared two standard contracts – one for private companies and one for municipalities, which is based on the prepared standard for municipalities. At times we must, together with Acubiz, negotiate with customers and their lawyers if they request other conditions that go beyond the terms of the standard contracts and conditions that are not necessary in order to comply with the General Data Protection Regulation.”

Countries interpret GDPR differently

The international customers do not make it easier, as it has been found that individual EU countries interpret GDPR differently,”, says Vivi Sejrsen, Acubiz GDPR responsible:

“We are currently negotiating with one of our customers, headquartered in Sweden, and we have experienced that the interpretation of the General Data Protection Regulation set is different, as the interpretations of the Danish and Swedish Data Protection Agencies are not quite the same. It generates some specific challenges. Therefore, it is of great interest that we comply with the initiatives of the Nordic Data Protection Agencies to make a common standard,” Vivi Sejrsen explains.

Lars de Nully: “Working on the data processing agreements is an ongoing project – there will always be a need for adjustments and a need for resources working on these adjustments,” he concludes.

Related articles

“Hveder” should still be enjoyed on a day off

On the last day of February this year, Store Bededag (Great Prayer Day) was abolished as a public holiday in 2024 by a majority in the Danish Parliament. However, at Visma Acubiz, we still believe that “Hveder” should be savored on a day off.

Are you ready for the new time registration law?

The new law on time registration has been adopted and will enter into force on 1 July 2024. The law outlines employees’ rights to rest periods and days off to protect them against working overtime. What does this new law mean for you as an employee or manager? We’ll try to answer that.

Visma Acubiz enters into a strategic partnership with TIMEmSYSTEM, which will elevate the offering of solutions for time registration to new heights.

Visma Acubiz and TIMEmSYSTEM are proudly introducing our partnership mTIME – the ultimate time registration system offering both high functionality and unmatched flexibility. Streamline your workflow effortlessly with features like automated holiday calculations, diverse employment term support, and seamless leave management. Say goodbye to obstacles and hello to productivity!

Opposing opinions on time registration 

While some view it as a restriction on flexibility and a form of control and surveillance of employees, others see it as a necessity to gain insight into how the company’s resources are utilized and to enable more accurate billing. Despite increased administrative costs and the required behavioral change, time tracking can provide managers and employees with a better overview of working hours and patterns.

The world’s top leaders’ predictions for 2024

PwC has asked more than 4,000 CEOs worldwide about how the future looks when speaking of economic growth, technological advancement, ai, and much more.