Law note · Norway
Personal Data Act, Data Subject Rights in Norway
cite personopplysningsloven LOV-2018-06-15-38, data subject rights provisions
stage In effect
since 2018-07-20
reviewed 2026-08-24
General Data Protection Regulation (GDPR) Articles 15 to 21, incorporated as Norwegian law through the Personal Data Act: access, rectification, erasure, restriction, portability, and objection, exercisable against the controller. Article 22 gives a qualified right against a decision based solely on automated processing with legal or similarly significant effect. No Norway-specific narrowing of these rights was found in the Chapter 3 provisions read directly.
What it asks of an app
- Honor a person's request to access, rectify, erase, restrict, port, or object to processing of their personal data in Norway within one month of receipt.
- Provide a meaningful human review before finalizing any decision based solely on automated processing that produces legal or similarly significant effects for a person in Norway, under the incorporated General Data Protection Regulation (GDPR) Article 22.
When LexLint raises it
Declared activities: crawls_web, trains_models, deploys_chatbot, automated_outreach, high_risk_decisions
Primary source: Lovdata.no official consolidated-law database, fetched and read directly