Region Nordjylland (North Denmark Region)

Denmark · owned by Independent (Danish State / Regional Government) (Denmark) · rn.dk · 21 vendors

Region Nordjylland (North Denmark Region) is one of Denmark's five administrative regions, responsible for providing public healthcare services including hospitals, psychiatry, and general practitioners to the citizens of North Jutland. Beyond healthcare, the region also oversees regional development, environmental management, mobility, education, and social services. It employs approximately 14,500 staff and is headquartered in Aalborg Øst.

Resilience scores

Technology vendors

Insights

Last updated 2026-05-30 · revision 6

21 direct vendors, 230 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 5/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Region Nordjylland exhibits medium migration readiness, primarily constrained by stringent regulatory and data residency requirements. As an EU-based public sector entity, it must adhere to GDPR, and as a likely "Essential Entity" under NIS2, it faces significant cybersecurity and data protection compliance obligations that add complexity and cost to any migration effort. The explicit data residency requirement for Denmark further limits cloud provider options and necessitates careful architectural planning to ensure all data remains within the specified geographical boundaries. The tech stack appears to be a mix, with reliance on national Danish digital infrastructure (Sundhed.dk, MitID, Digital Post) which can simplify migration for some components by leveraging shared services. However, details on the cloud-nativeness, containerization, or microservices adoption for their internal systems are not provided, suggesting a potential mix of modern and legacy components that could complicate a full-scale migration. The "Total Services: 38" implies a potentially large number of vendor relationships, which, while offering some diversity (vendor HQs in 4 countries), could lead to significant vendor lock-in risks (which are currently unknown) and contract complexities during a migration. The experience gained from the IT infrastructure rebuild and system migrations post-cyberattack in 2023 could be an asset, indicating internal capability to manage large-scale IT changes. The absence of financial stability data prevents an assessment of the organization's capacity to fund a major migration initiative.

Compliance

3 in-scope frameworks identified; showing 3.

NIS2 (source) — Assessment Required

Region Nordjylland operates critical healthcare infrastructure including Aalborg University Hospital and regional healthcare services, which likely qualifies them as an Essential Entity under NIS2. As a large public sector organization providing essential health services in the EU, they exceed size thresholds and operate in a critical sector. Non-compliance with NIS2 could result in significant fines (up to €10M or 2% of annual turnover) and operational restrictions. The healthcare sector is specifically targeted by NIS2 due to its critical nature.

Evidence: https://rn.dk/da/Service/Kontakt-og-find-vej/Politik-for-Informationssikkerhed

GDPR (source) — Compliant

Region Nordjylland is a Danish public sector entity located in the EU and processes extensive personal data including sensitive health information. While they demonstrate strong GDPR compliance with comprehensive data protection policies, dedicated DPO function, and detailed privacy rights documentation, the high volume of sensitive health data processing and public sector obligations create inherent compliance risks. Danish public sector entities face regular scrutiny and must balance transparency obligations with privacy protection.

Evidence: https://rn.dk/da/Service/Kontakt-og-find-vej/Dine-rettigheder-naar-regionen-behandler-oplysninger-om-dig, https://rn.dk/da/Service/Kontakt-og-find-vej/Politik-for-Informationssikkerhed

ISO 27001 (source) — Assessment Required

While not legally mandatory, ISO 27001 is highly recommended for organizations handling sensitive data, especially in healthcare. Region Nordjylland processes extensive sensitive health data and has established information security frameworks, but formal ISO 27001 certification status is unclear. The risk is moderate as they have alternative security frameworks in place, but certification would provide additional assurance and competitive advantage.

Evidence: https://rn.dk/da/Service/Kontakt-og-find-vej/Politik-for-Informationssikkerhed

Financials

Three-year financials

Financial Resilience Score: 8/10

Region Nordjylland demonstrates strong financial resilience characteristic of a Danish public-sector regional authority. Approximately 82% of healthcare funding comes from the state block grant (statsligt bloktilskud) with another 15% from municipal co-financing, providing an exceptionally stable and predictable funding base with minimal market risk. The Region delivered a surplus (driftsresultat) of DKK 367.1M in 2024, an improvement of 15.9% over 2023, and turned around hospital operations through a transformation plan that reduced Aalborg University Hospital costs by approx. DKK 240M year-on-year. Equity stands at DKK 3.87B with total assets of DKK 13.6B, and cash improved from DKK 286M to DKK 547M during 2024. Average liquidity per the kassekreditregel is approx. DKK 1.86B (DKK 1,862 per citizen, well above the DKK 1,000/citizen minimum). Key risks include the major construction overrun on Nyt Aalborg Universitetshospital (NAU) totaling approx. DKK 1,550M in 2025 prices, partially mitigated by loan authorisation of up to DKK 1,493M and potential insurance recovery of up to DKK 200M via arbitration. Long-term debt of DKK 2.98B is expected to rise as further NAU-related loans are drawn. Provisions (hensatte forpligtelser) including pensions and work injury liabilities reached DKK 3,463M. Rising patient compensation claims (DKK 115M in 2024 vs DKK 68M in 2023) and continued operating deficits at Aalborg University Hospital (DKK 54.9M overspend) and Regionshospital Nordjylland (DKK 19.4M overspend) represent ongoing cost pressures. Despite these challenges, the stable statutory funding framework and improved budget discipline support a high resilience rating.

Key strengths: 82% of healthcare funding from stable state block grant, 15% municipal co-financing provides additional funding stability, Surplus of DKK 367.1M in 2024, up 15.9% YoY, Equity of DKK 3.87B and total assets of DKK 13.6B, Cash position improved from DKK 286M to DKK 547M during 2024, Average liquidity DKK 1,862 per citizen, well above DKK 1,000 minimum, Successful transformation plan reducing Aalborg University Hospital costs by ~DKK 240M, 94% compliance with udredningsret in Q4 2024 (best in Denmark)

Risk factors: Major NAU construction overrun of approx. DKK 1,550M (2025 prices), Long-term debt of DKK 2.98B expected to rise with further NAU loans, Rising patient compensation claims (DKK 115M in 2024 vs DKK 68M in 2023), Hospital operating deficits at Aalborg University Hospital (DKK 54.9M) and Regionshospital Nordjylland (DKK 19.4M), Pharmaceutical cost pressure with sygehusmedicin overspend of DKK 35M, Pension and work injury liabilities of DKK 3,463M, Declining 4-year average liquidity trend (from ~DKK 1,400M to ~DKK 1,100M), Specialized treatments in other regions rising from DKK 73M (2022) to DKK 103M (2024)

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report