The Norwegian Bookkeeping Act (Section 13) establishes local storage requirements for accounting data. However, exemptions can be sought – and are regularly granted – if adequate storage facilities cannot be found in Norway. Under an exemption, companies may store their data offshore so long as it can still be accessed by the Norwegian Tax Administration if required.

The Act on the Processing of Personal Data (Personal Data Act) implements the General Data Protection Regulation (GDPR) of the European Union in Norway. In addition to companies established in the European Economic Area (EEA), the Regulation applies extraterritorially to companies offering goods or services to data subjects in the EEA and companies that monitor the behaviour of EEA citizens (Art. 3).
The Regulation mandates that data is allowed to flow freely outside the European Economic Area (EEA) only in certain circumstances listed in Chapter 5 of the Regulation. The main conditions for such a transfer are the following: the recipient jurisdiction has an adequate level of data protection; the controller adduces adequate safeguards (for instance, by using model contract clauses, binding corporate rules or other contractual arrangements); the data subject has given his/her consent explicitly; or, the transfer is necessary for the performance of a contract between the data subject and the controller.
The GDPR allows for data transfers to countries whose legal regime is deemed by the European Commission to provide for an “adequate” level of personal data protection. The European Commission has so far recognised Andorra, Argentina, Canada (commercial organisations), Faroe Islands, Guernsey, Israel, Isle of Man, Japan, Jersey, New Zealand, Republic of Korea, Switzerland, the United Kingdom, and Uruguay as providing adequate protection. In addition, the EU-US Data Privacy Framework has acted as a self-certification system open to certain US companies for data protection compliance since July 2023.

Norway has joined two agreement with binding commitments to open transfers of data across borders. These include: Free Trade Agreement between Iceland, the Principality of Liechtenstein and the Kingdom of Norway and the United Kingdom of Great Britain and Northern Ireland (Art. 4.11.1), and the Free Trade Agreement Between The EFTA States And The Republic of Moldova (Art. 5.11)

Norway is a party to the Patent Cooperation Treaty (PCT).

The Norwegian Copyright Act (2018) contains limited exceptions to copyright, including temporary copies, copies for private use or educational purposes, quotations, parodies, and for people with disabilities. It does not, however, contain fair use or fair dealing rights broadly defined. As a European Economic Area (EEA) member, the European acquis of copyright law also applies in Norway.

It has been consistently reported since 2017 that rightsholders argue the authorities have not accorded sufficient priority to cases concerning copyright infringement and internet piracy. Furthermore, research published in 2023 revealed that 22% of viewers aged 15 to 74 in Norway had illegally streamed or downloaded films or television episodes within a single month, representing an increase from 18% in 2022.

Norway has not signed the World Intellectual Property Organization (WIPO) Copyright Treaty.

Norway is a signatory of the World Trade Organization (WTO) Information Technology Agreement (ITA) of 1996 and its 2015 expansion (ITA II).

The Public Procurement Act grants rights to engage in public procurement only to those public and private enterprises "as defined in international agreements to which Norway is bound". This restricts public procurement to partners in regional trade agreements and members of the WTO's Government Procurement Agreement.

In March 2023, Norway's parliament (Storting) banned TikTok and Telegram from all work devices with access to parliamentary systems, following a similar decision by the government earlier that week. The move was based on recommendations from the National Security Authority (NSM), which cited security concerns related to data access and potential foreign influence. The ban applies to members of parliament and staff, who were instructed to remove the apps promptly. Additionally, the city governments of Oslo and Bergen urged municipal employees to delete TikTok from their work phones. These actions align Norway with other Western governments implementing similar restrictions on the Chinese-owned platform.

Although Norway is a signatory to the WTO Government Procurement Agreement (GPA), its coverage schedules do not include "telecommunications-related services" (CPC 754), which is an important services sector for digital trade.

It is reported that the Norwegian investment regime encourages foreign investment as a general policy, granting national treatment to foreign investors. Although Norway's investment regime is based on the principle of national treatment, there are ownership restrictions on some natural resources and specific activities, such as fishing, shipping and road transport.

Under Art. 6.11 of the Public Limited Liability Companies Act, at least half of the board members, along with the managing director, of a Limited Liability Company must reside in Norway or be citizens and residents of a European Economic Area (EEA) country.