Law note · Norway
Personal Data Act and GDPR Chapter V, Cross-Border Transfer from Norway
Transfers within the EEA, including to EU member states, are unrestricted; the restriction applies to transfers to third countries outside the EEA. General Data Protection Regulation (GDPR) Chapter V, incorporated as Norwegian law through the Act, permits such a transfer only on an adequacy decision, appropriate safeguards such as Standard Contractual Clauses or Binding Corporate Rules, or a narrow Article 49 derogation, backed by the Article 83(5) top fine tier.
No Norway-specific provision in Chapter 3 narrowing or broadening this beyond the incorporated GDPR text was found in the provisions read directly.
What it asks of an app
- Rely on a European Commission adequacy decision, Standard Contractual Clauses with a transfer impact assessment, Binding Corporate Rules, or a narrow Article 49 derogation before moving personal data of a person in Norway outside the European Economic Area.
When LexLint raises it
Declared activities: crawls_web, trains_models, deploys_chatbot
Primary source: Lovdata.no official consolidated-law database, fetched and read directly