Database

Browse Database

NORWAY

N/A

Pillar Online sales and transactions  |  Indicator Ratification of the UN Convention on the Use of Electronic Communications in International Contracts
Lack of signature of the UN Convention on the Use of Electronic Communications in International Contracts
Norway has not signed the United Nations (UN) Convention on the Use of Electronic Communications in International Contracts.
Coverage Horizontal

NORWAY

N/A

Pillar Online sales and transactions  |  Indicator UNCITRAL Model Law on Electronic Commerce
Lack of adoption of UNCITRAL Model Law on Electronic Commerce
Norway has not adopted national legislation based on or influenced by the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Commerce.
Coverage Horizontal

NORWAY

N/A

Pillar Online sales and transactions  |  Indicator UNCITRAL Model Law on Electronic Signatures
Lack of adoption of UNCITRAL Model Law on Electronic Signatures
Norway has not adopted national legislation based on or influenced by the United Nations Commission on International Trade Law (UNCITRAL) Model Law on Electronic Signatures.
Coverage Horizontal

NORWAY

Since June 2013

Pillar Quantitative trade restrictions for ICT goods and online services  |  Indicator Export restrictions on ICT goods or online services
Regulations relating to the Export of Defence-Related Products, Dual-Use Items, Technology and Services
The "Regulations relating to the Export of Defence-Related Products, Dual-Use Items, Technology, and Services" harmonise Norway's export controls with those of the European Union by subscribing to the European Dual-Use Export Control Annex. The Annex identifies a range of dual-use items that face either authorisation requirements or outright bans for exportation outside of the EU.
Coverage Dual-use items

NORWAY

Since August 2014, as amended in March 2022, last amended in November 2024

Pillar Quantitative trade restrictions for ICT goods and online services  |  Indicator Export restrictions on ICT goods or online services
Regulations on Restrictive Measures Regarding Actions that Undermine or Threaten the Territorial Integrity, Sovereignty, Independence, and Stability of Ukraine (Forskrift om restriktive tiltak vedrørende handlinger som undergraver eller truer Ukrainas territorielle integritet, suverenitet, uavhengighet og stabilitet)
Since the implementation of Regulation No. 1076 of 15 August 2014, Norway imposes extensive export and import controls on Russia, which have significantly expanded in response to the 2022 invasion of Ukraine. A key element of these measures is the amendment introduced by Regulation No. 1076 of 15 August 2014, as modified in March 2022 (FOR-2022-03-18-410). This regulation prohibits the export, sale, supply, or transfer of various goods and technologies to Russia, including:
- The prohibition on the export, import, and transport of defence-related goods (Art. 15);
- The prohibition on the export of multi-use goods and technologies (Art. 16);
- The prohibition on the export of goods and technologies listed in Annex IX (Art. 16a);
- The prohibition on the export of goods for use in the aeronautical or space industry, as listed in Annex XII (Art. 17c);
- The prohibition on the export of goods and technologies intended for maritime navigation (Art. 17d).
Coverage Dual-use items

NORWAY

Since March 2017

Pillar Technical standards applied to ICT goods and online services  |  Indicator Self-certification for product safety
The Regulations on Electromagnetic Compatibility (2017) (Forskrift om EØS-krav til elektromagnetisk kompatibilitet (EMC) for utstyr til elektronisk kommunikasjon)
The Regulations on Electromagnetic Compatibility (2017) implement Directive 2014/30/EU of the European Parliament and the Council in Norway. Chapter 4 establishes a self-certification mechanism, which is fully detailed in Annex II of the regulations.
Coverage Electromagnetic capability technologies

NORWAY

Since June 2018, entry into force in July 2018

Pillar Domestic data policies  |  Indicator Framework for data protection
Act on the processing of personal data (Personal Data Act) (Lov om behandling av personopplysninger (personopplysningsloven))
The Act on the Processing of Personal Data (Personal Data Act) implements the General Data Protection Regulation (GDPR) of the European Union in Norway. In addition to companies established in the EU, the Regulation applies extraterritorially to companies offering goods or services to data subjects in the EU and companies that monitor the behaviour of EU citizens (Art. 3). Norway thus has a fully established framework for the protection of personal data.
Coverage Horizontal

NORWAY

Since June 2018, entry into force in July 2018

Pillar Domestic data policies  |  Indicator Requirement to perform a Data Protection Impact Assessment (DPIA) or have a data protection officer (DPO)
Act on the processing of personal data (Personal Data Act) (Lov om behandling av personopplysninger (personopplysningsloven))
The Act on the Processing of Personal Data (Personal Data Act) implements the General Data Protection Regulation (GDPR) of the European Union in Norway. The GDPR requires that organisations conducting "regular and systematic monitoring of data subjects on a large scale" or whose activities include the processing of sensitive personal data on a large scale must appoint a Data Protection Officer (DPO).
Coverage Horizontal
Source
  • ttps://web.archive.org/web/20231124003851/https://lovdata.no/dokument/NL/lov/2018-06-15-38?q=gdpr

NORWAY

Since June 2018, entry into force in July 2018

Pillar Domestic data policies  |  Indicator Requirement to perform a Data Protection Impact Assessment (DPIA) or have a data protection officer (DPO)
Act on the processing of personal data (Personal Data Act) (Lov om behandling av personopplysninger (personopplysningsloven))
The Act on the Processing of Personal Data (Personal Data Act) implements the General Data Protection Regulation (GDPR) of the European Union in Norway. Under the GDPR, Data Protection Impact Assessments (DPIAs) are mandatory for data processing activities that are likely to result in a high risk to the rights and freedoms of natural persons.
Coverage Horizontal

NORWAY

Since May 2003, entry into force in July 2003

Pillar Intermediary liability  |  Indicator Safe harbour for intermediaries for copyright infringement
Act No. 35 Relating to Certain Aspects of Electronic Commerce and Other Information Services (Electronic Commerce Act) (Lov om visse sider av elektronisk handel og andre informasjonssamfunnstjenester (ehandelsloven))
The Act on certain aspects of electronic commerce and other information society services (e-commerce law) implements Directive 2000/31/EC (E-Commerce Directive), establishing a conditional safe harbour for Internet Service Providers (ISPs) in Norway. The limitations on liability in the Directive apply to certain clearly delimited activities carried out by internet intermediaries rather than to categories of service providers or types of information. These are caching, conducting and hosting (Sections 16–18), while Section 19 releases ISPs from monitoring obligations.
In addition, ISPs are responsible for illegal content (including copyright infringement) if they obtain knowledge or awareness that such content is present and do not expeditiously remove or restrict access to the content. As a result, many ISPs have proactively introduced user agreements to allow them to remove any controversial content – including content that is not necessarily illegal – in order to protect themselves from liability. The Ministry of Culture is working on the implementation of Directive 2019/790 on Copyright in the Digital Single Market.
Coverage Internet service providers

NORWAY

Since May 2003, entry into force in July 2003

Pillar Intermediary liability  |  Indicator Safe harbour for intermediaries for any activity other than copyright infringement
Act No. 35 Relating to Certain Aspects of Electronic Commerce and Other Information Services (Electronic Commerce Act) (Lov om visse sider av elektronisk handel og andre informasjonssamfunnstjenester (ehandelsloven))
The Act on certain aspects of electronic commerce and other information society services (e-commerce law) implements Directive 2000/31/EC (E-Commerce Directive), establishing a conditional safe harbour for Internet Service Providers (ISPs) in Norway. The limitations on liability in the Directive apply to certain clearly delimited activities carried out by internet intermediaries rather than to categories of service providers or types of information. These are caching, conducting and hosting (Sections 16–18), while Section 19 releases ISPs from monitoring obligations.
In addition, ISPs are responsible for illegal content (including copyright infringement) if they obtain knowledge or awareness that such content is present and do not expeditiously remove or restrict access to the content. As a result, many ISPs have proactively introduced user agreements to allow them to remove any controversial content – including content that is not necessarily illegal – in order to protect themselves from liability. Finally, Norway is obliged to implement Directive 2019/790 on Copyright in the Digital Single Market. However, it has not yet done so as of May 2022.
Coverage Internet service providers

NORWAY

Reported in 2021, last reported in 2023

Pillar Intermediary liability  |  Indicator User identity requirement
Mandatory SIM card registration
It is reported that Norway imposes an identity requirement for SIM registration. Anyone wanting to purchase a SIM card has to provide their national ID card or a passport in case of foreigners to activate a new prepaid SIM card.
Coverage Telecommunications sector

NORWAY

N/A

Pillar Intellectual Property Rights (IPRs)  |  Indicator Adoption of the WIPO Performances and Phonograms Treaty
Lack of signature of the WIPO Performances and Phonograms Treaty
Norway has not signed the World Intellectual Property Organization (WIPO) Performances and Phonograms Treaty.
Coverage Horizontal

NORWAY

Since January 2021

Pillar Intellectual Property Rights (IPRs)  |  Indicator Effective protection covering trade secrets
Trade Secrets Act (2020) (Lov om vern av forretningshemmeligheter (forretningshemmelighetsloven))
The Trade Secrets Act (2020) provides a framework for effective protection of trade secrets.
Coverage Horizontal

NORWAY

N/A

Pillar Telecom infrastructure & competition  |  Indicator Passive infrastructure sharing obligation
​​Passive infrastructure sharing obligation
It is reported that passive sharing of telecom infrastructure is mandated and practised in both the mobile and fixed sectors. Moreover, Directive 2014/61/EU (Art. 3.2) has been incorporated into the European Economic Area (EEA) agreement, meaning it is technically required to be implemented in Norway.
Coverage Telecommunications sector

Report issue     Report new measure