Checked on September 27, 2026
GDPR in Norway
How the GDPR works in Norway: the supervisory authority, the national law that supplements the regulation, and where to notify a breach.
- Supervisory authority
- Norwegian Data Protection Authority (Datatilsynet)
- National law supplementing the GDPR
- Personal Data Act (incorporates the GDPR via the EEA Agreement) · Lov om behandling av personopplysninger (personopplysningsloven) · LOV-2018-06-15-38
- Age of digital consent
- 13
- Breach notification
- info.altinn.no/skjemaoversikt/datatilsynet/melding-om-avvik-datatilsynet/
- National specifics
- Breach notifications are filed by the controller through Altinn (form 'Melding om avvik').
- For special-category data Datatilsynet states the consent age limit is always 18.
Where does your company stand?
The free assessment applies these national rules to your answers and scores every area of the law.
Sources
- www.datatilsynet.no/rettigheter-og-plikter/virksomhetenes-plikter/avvik/meld-avvik-til-datatilsynet/
- lovdata.no/dokument/NL/lov/2018-06-15-38/gdpr/ARTIKKEL_8
- www.datatilsynet.no/personvern-pa-ulike-omrader/skole-barn-unge/samtykkje-fra-mindrearige/
- www.efta.int/eea-lex/32022l2555
- nsm.no/aktuelt/ny-digitalsikkerhetslov-i-norge
National laws and portals change. This page is general information, not legal advice; confirm with the authority before relying on it.