Norway Publishes Consultation Notes on Draft Personal Data Act

Norway has published consultation notes on a new draft Personal Data Act (the Act) designed to implement the principles of the EU General Data Protection Regulation (GDPR). In addition to translating the text of the GDPR into Norwegian, the Act also takes advantage of multiple derogations and special conditions in the GDPR, in an effort to retain certain aspects of Norway’s current data protection law.


The GDPR allows member states flexibility in certain areas to further specify the GDPR’s application. As a result, local variations among member states will still exist regardless of the GDPR’s goals for harmonisation. The GDPR is set to go into effect on May 25, 2018.

Notable Variation

Here are some notable areas of variation from the GDPR that would exist according to the consultation notes:

Ultimately, companies will need to take note of these local variations, in addition to the GDPR itself, as they ready their compliance efforts. As always, OneTrust will continue to track these developments as they become available.