GDPR is not a directive. There is no 'national implementation'.

I can believe such a law does exist in Denmark. It is not GDPR. GDPR might increase the penalties for non-compliance.

Such a law is a sign that the Danish don't trust their public sector as much as you suggest...

BTW to you remember that time that all your health data was delivered to the Chinese embassy on a DVD?