Checked on September 27, 2026
NIS2 in Norway
How Norway applies the NIS2 cybersecurity directive: the national law, who supervises, and how to register and report incidents.
NIS2 (Directive 2022/2555) has not been incorporated into the EEA Agreement (EFTA EEA-Lex: under scrutiny, no JCD), so it does not yet apply in Norway. The Digital Security Act (digitalsikkerhetsloven, LOV-2023-12-20-108), in force since 1 Oct 2025, implements NIS1; NIS2 is expected via a new law.
Where does your company stand?
The free assessment applies these national rules to your answers and scores every area of the law.
National laws and portals change. This page is general information, not legal advice; confirm with the authority before relying on it.