-
How is the writing of insurance contracts regulated in your jurisdiction?
The Norwegian Insurance Contracts Act (the “ICA”) does not in itself determine the substantive scope of insurance coverage. However, where an insurer provides insurance that is mandatory by law, the relevant statutory provisions will define the minimum scope of coverage. A typical example is compulsory liability insurance for insurance intermediaries.
For insurance contracts not subject to statutory coverage requirements, the principle of freedom of contract applies. This contractual freedom is, however, limited by the mandatory provisions of the ICA, in particular those governing the insured’s duties of disclosure and care. Insurers may not structure or limit coverage in a manner that undermines the protective effect of these statutory rules.
An important regulatory framework was introduced following Norway’s implementation of the EU Insurance Distribution Directive (IDD). As a result, the ICA was substantially restructured, with particular emphasis on rules governing customer communication and insurance distribution. These amendments entered into force on 1 July 2022.
The ICA is now divided into six parts:
The first part establishes the Act’s general framework. It defines the scope of application and key definitions, sets out conditions for exemptions, and imposes general duties on insurers, including requirements relating to conduct of business, organizational structure, and the use of electronic communications. These provisions apply not only to insurance companies but, to the extent specified, also to insurance intermediaries.
The second part governs the parties’ obligations prior to the conclusion of an insurance contract. It introduces detailed requirements for identifying the customer’s demands and needs and, for insurance-based investment products, for assessing the customer’s knowledge, experience, financial situation, and investment objectives before any personal recommendation is made. This part also includes rules on the insurer’s right to refuse insurance, restrictions on certain forms of cross-selling, extensive pre-contractual information duties, including the use of standardized disclosure documents such as the Insurance Product Information Document (IPID), and the customer’s statutory right of withdrawal.
The third part regulates non-life insurance contracts, while the fourth part governs insurance of persons.
The fifth part concerns enforcement and supervision. It establishes insurers’ liability for losses resulting from breaches of the Act, imposes requirements for complaint-handling procedures, and grants supervisory powers to the Consumer Authority and the Market Council. This part also provides for administrative sanctions, including infringement fees.
The sixth part contains provisions on entry into force and transitional arrangements.
Insurance contracts are additionally subject to general principles of Norwegian contract law. However, mandatory provisions of the ICA are not subject to contractual revision under general contract law principles, such as section 36 of the Norwegian Contracts Act, as these provisions apply by operation of law rather than by agreement.
The provisions of Part Three of the ICA are generally mandatory and may not be derogated, with the exception of rules concerning an injured third party’s direct right of action against an insolvent tortfeasor’s liability insurer. None of the provisions in Part Four may be derogated to the detriment of the insured.
Derogation from the remaining provisions of the ICA is permitted only where the insured qualifies as a commercial insured. This requires that the insured has more than 250 employees and either annual revenues exceeding EUR 13.6 million or total assets exceeding EUR 6.6 million, based on the most recent financial statements.
The commercial insured exemption also applies where the insured’s business is mainly conducted outside Norway, where the insurance concerns vessels or aircraft, or where it covers goods in international transportation.
Following the implementation of the IDD, electronic communication has become the default means of communication between insurers and customers under Norwegian insurance law.
-
Are types of insurers regulated differently (i.e. life companies, reinsurers?)
Yes. Different categories of insurers are subject to distinct regulatory regimes under the Norwegian Financial Institutions Act, supplemented by sector-specific regulations. Separate rules apply to non-life insurance companies, life insurance companies, and credit insurance undertakings.
Different types of insurance activities require separate authorisations and are subject to different capital and solvency requirements. As a general rule, life insurance and non-life insurance activities may not be carried out by the same legal entity, as an undertaking may only be licensed to conduct one category of insurance business. Reinsurance is also subject to a separate licensing requirement. While there is no standalone statutory regime specifically governing reinsurance, authorisation and prudential requirements are assessed by reference to the underlying insurance activity to which the reinsurance relates.
Life insurance contracts are regulated by Part Four of the Norwegian Insurance Contracts Act (ICA), while Part Three governs non-life insurance contracts. The ICA does not apply to reinsurers. Reinsurance contracts are therefore generally treated as commercial contracts and are governed by the general principles of Norwegian contract law, supplemented by other applicable legislation depending on the legal issue in question.
-
Are insurance brokers and other types of market intermediary subject to regulation?
Yes. Insurance brokers, insurance agents and ancillary insurance intermediaries operating in the Norwegian market are subject to regulation under the Norwegian Insurance Mediation Act of 2021 and its accompanying regulations.
The Insurance Mediation Act implements the EU Insurance Distribution Directive (Directive (EU) 2016/97, IDD) into Norwegian law. In certain areas, Norwegian legislators have made use of the discretion afforded under the Directive to introduce requirements that are stricter than those required by the IDD.
In brief, the Act establishes authorisation and registration requirements, organisational and conduct‑of‑business obligations, and rules on remuneration, conflicts of interest and customer protection. It also sets out minimum educational and competence requirements for insurance intermediaries.
Also note that with the exception of section 1‑7, first paragraph, the provisions of Part One of the ICA apply correspondingly to insurance intermediaries. This means that the general framework set out in the ICA, including rules on scope of application, definitions, conduct‑of‑business requirements and the use of electronic communication, also applies to insurance brokers and other intermediaries to the extent relevant. The exemption in section 1‑7, first paragraph, limits the application of certain insurer‑specific obligations, reflecting the different roles of insurers and intermediaries within the regulatory framework.
-
Is authorisation or a licence required and if so how long does it take on average to obtain such permission? What are the key criteria for authorisation?
Yes. All insurers and reinsurers must obtain authorisation from the Norwegian Financial Supervisory Authority (the “NFSA”) in order to conduct insurance or reinsurance activities in Norway.
Norway is a member of the European Economic Area (EEA) and therefore participates in the EEA “single passport” regime. Insurers authorised in another EEA member state may generally operate in Norway either on a cross‑border services basis or through the establishment of a Norwegian branch, subject to notification procedures between the relevant supervisory authorities. Insurers established outside the EEA must apply for a Norwegian licence and conduct their activities through a Norwegian subsidiary.
Key criteria for authorisation include compliance with minimum start‑up capital requirements and satisfaction of the organisational and governance standards set out in the Financial Institutions Act. This includes requirements relating to the fitness and propriety of board members and senior management, as well as the undertaking’s organisational structure, internal controls and risk management systems.
Applications are decided by the NFSA and must be communicated to the applicant within six months from receipt of a complete application. Where the application is incomplete, the NFSA may request additional information, which may extend the processing time. In all cases, the application must be decided within twelve months of receipt. In practice, and based on our experience, the authorisation process typically takes approximately six months provided that all required documentation is submitted from the outset.
Insurance intermediary undertakings are also required to obtain authorisation from the NFSA in order to operate in Norway. Applications from Norwegian intermediaries are normally processed within three months, provided that the application is complete. Insurance intermediaries authorised in another EEA state may commence activities in Norway, either through a branch or on a cross‑border basis, one month after the NFSA has received notification from the competent authority in the intermediary’s home state. Intermediaries established outside the EEA may only operate in Norway through a branch and must obtain specific approval from the NFSA.
-
Are there restrictions or controls over who owns or controls insurers (including restrictions on foreign ownership)?
Yes. Insurers are subject to ownership control rules applicable to all “financial enterprises” under the Norwegian Financial Institutions Act. Any person or entity intending to acquire a qualifying holding in an insurance undertaking must notify, and obtain prior approval from, the Norwegian Financial Supervisory Authority (NFSA), or, in certain cases, from the Ministry of Finance.
A qualifying holding is defined as a direct or indirect holding representing 10 per cent or more of the share capital or voting rights of a financial institution, or a holding that otherwise enables the acquirer to exercise significant influence over the management or operations of the undertaking. The rules apply equally to acquisitions by Norwegian and foreign individuals or entities.
Approval may only be granted if the proposed acquirer is deemed suitable based on specified, non‑discriminatory criteria set out in the legislation, commonly referred to as the fit and proper assessment. In general, the acquirer must be considered financially robust and suitable to exercise ownership influence.
Further approvals are required when ownership thresholds of 20 per cent, 30 per cent or 50 per cent are reached or exceeded.
In September 2025, the EFTA Court ruled that Norway’s practice of limiting ownership to 25% was incompatible with EEA law. Norway amended the law (FIA §6-3) effective 1 July 2024 to remove non-harmonized criteria. This means authorities can no longer presume a cap at 25%; acquisitions above 25% must be assessed solely on fit & proper criteria, in line with EU directives.
Three-quarters of the share capital of the insurance undertaking shall be subscribed by increase of capital with no preferential right for shareholders or others.
Norwegian law does not impose general restrictions on foreign ownership of insurance enterprises.
-
Is it possible to insure or reinsure risks in your jurisdiction without a licence or authorisation? (i.e. on a non-admitted basis)?
As a general rule, insurers that are neither authorised in Norway nor permitted to operate under the EEA single passport regime may not lawfully market insurance products or conduct insurance business in the Norwegian market.
An insurer authorised in another EEA member state may, however, insure risks located in Norway on a freedom of services basis or through the establishment of a branch, relying on its home‑state authorisation under the EEA passporting regime. In such cases, the insurer is not required to obtain a separate Norwegian licence, provided that the relevant notification procedures between the supervisory authorities have been completed.
By contrast, insurers established outside the EEA may not insure Norwegian risks on a non‑admitted basis. Such undertakings must obtain authorisation from the Norwegian Financial Supervisory Authority and conduct insurance activities through a Norwegian subsidiary or, where permitted, a licensed branch.
-
Is a branch of an overseas insurer, insurance broker and/or other types of market intermediary in your jurisdiction subject to a similar regulatory framework as a locally incorporated entity?
Yes, insurance and insurance mediation activities conducted in Norway are governed by the Norwegian Financial Institutions Act 2015 and the Insurance Mediation Act 2021, together with associated regulations, including the Regulations on Financial Enterprises and Financial Groups and on Insurance Mediation. These statutes apply primarily to insurers, reinsurers and insurance intermediaries incorporated in Norway.
Insurers, reinsurers and insurance intermediaries established in another member state of the European Economic Area (EEA) and operating in Norway through a branch are subject both to the regulatory requirements of their home state and to certain host‑state rules under Norwegian law. In particular, key provisions of the Financial Institutions Act, the Insurance Activity Act and the Insurance Mediation Act apply, subject to the allocation of supervisory competence between home‑ and host‑state authorities under the EEA framework.
By contrast, insurers and insurance intermediaries that operate in Norway solely on a cross‑border services basis are primarily regulated by the licensing and supervisory regime of their home state. Only limited Norwegian host‑state requirements apply, mainly relating to conduct of business and information duties towards customers in connection with the sale and distribution of insurance products.
-
Are there any restrictions/substance limitations on branches established by overseas insurers?
Yes. Branches established in Norway by overseas insurers are subject to substantive restrictions and regulatory requirements under the Norwegian Financial Institutions Act and the Insurance Activity Act, supplemented by regulations and supervisory practice.
Insurers domiciled outside the European Economic Area (EEA) may only establish a branch in Norway with specific authorisation from the Norwegian Financial Supervisory Authority (NFSA). Such authorisation may cover only insurance activities corresponding to those the insurer is licensed to conduct in its home state, and only where the home‑state supervision is considered satisfactory. The NFSA applies detailed requirements when assessing applications from third‑country insurers.
Branches of third‑country insurers are subject to requirements relating to, inter alia, local presence and organisation, including the location of the main branch office in Norway, local staffing, governance and management arrangements, ownership structure and minimum initial capital. In addition, the undertaking must comply with statutory requirements concerning sound business practices and maintain sufficient solvency margins.
Insurance distribution carried out by the branch must fall within recognised Norwegian insurance product classes and comply with the Solvency II framework. Consistent with EIOPA guidelines on the supervision of branches of third‑country insurers, such branches must also meet extensive requirements relating to financial resources, reporting (including ORSA), risk management, governance and internal control systems, in addition to complying with applicable Norwegian insurance laws and regulations.
Cross‑border provision of insurance services into Norway without establishment is generally not permitted for insurers domiciled outside the EEA. Such activity is limited to insurers authorised in other EEA member states operating under the passporting regime.
-
What penalty is available for those who operate in your jurisdiction without appropriate permission?
Operating insurance or reinsurance activities in Norway without the required authorisation constitutes a criminal offence under Norwegian law. Such violations may be sanctioned with fines or imprisonment for up to one year, as provided for in section 22‑1 of the Norwegian Financial Institutions Act.
In addition to criminal sanctions, the Norwegian Financial Supervisory Authority (NFSA) has a range of administrative enforcement powers. Where an insurance or reinsurance undertaking fails to comply with applicable legal or regulatory requirements, the NFSA may issue formal warnings, order the undertaking to implement corrective measures, and/or require it to cease its activities. In serious or persistent cases, the NFSA may also revoke the undertaking’s licence.
-
How rigorous is the supervisory and enforcement environment? What are the key areas of its focus?
The supervisory and enforcement environment in Norway is generally considered predictable and proportionate, with a strong emphasis on guidance, preventive supervision and corrective measures rather than frequent use of the most severe sanctions. Withdrawal of licences is relatively rare and has, in practice, only occurred in a limited number of cases, primarily involving insurance intermediaries.
Through its supervision of financial undertakings and markets, the Norwegian Financial Supervisory Authority (NFSA) seeks to promote financial stability, orderly market conditions and confidence that financial obligations are met and services performed as intended. Supervision focuses in particular on solvency, governance and risk management, capital adequacy and compliance with capital requirements, as well as product governance and conduct of business towards customers.The supervisory approach is risk‑based and relies both on mandatory regulatory reporting by supervised entities and on the NFSA’s own supervisory activities, including thematic reviews, random sampling and the investigation of tips or indications of irregularities.
A notable development in recent years has been increased regulatory attention to anti‑money laundering (AML) compliance across the financial sector. While enforcement actions and substantial administrative fines have predominantly been directed at banks, these developments illustrate that certain regulatory areas are enforced rigorously where the authorities identify heightened systemic or integrity risks.
-
How is the solvency of insurers (and reinsurers where relevant) supervised?
Norwegian insurers and reinsurers are required to carry out ongoing internal monitoring of their solvency and overall financial position. At a minimum, undertakings must perform and report an annual assessment of their solvency and risk profile to the Norwegian Financial Supervisory Authority (NFSA). This assessment must form an integral part of the undertaking’s system for risk management and internal control, including the Own Risk and Solvency Assessment (ORSA).
Where there are material changes in the undertaking’s financial position or risk exposure, the NFSA may require more frequent reporting or additional information.
In addition to relying on regulatory reporting, the NFSA supervises insurers’ and reinsurers’ solvency through a risk‑based supervisory framework. This includes continuous assessments of individual undertakings, as well as broader analyses based on developments in the financial markets and the financial system as a whole. The supervisory approach combines off‑site monitoring with thematic reviews and targeted supervisory measures where elevated risk is identified.
-
What are the minimum capital requirements?
Minimum capital requirements for Norwegian insurance and reinsurance undertakings are based on the EU Solvency II Directive and are implemented in Norwegian law through the Financial Institutions Act of 2015.
Under the Solvency II framework, undertakings must comply with both the Solvency Capital Requirement (SCR) and the Minimum Capital Requirement (MCR). The SCR is calibrated to ensure that insurers are able to withstand losses corresponding to a 99.5 per cent Value at Risk over a one‑year period, whereas the MCR represents the lowest level of capital below which policyholders and beneficiaries would be exposed to an unacceptable level of risk.
The MCR is calculated using a simplified, linear formula designed to ensure an 85 per cent probability that aggregate losses over a 12‑month period will not exceed the available eligible own funds. The MCR is subject to a corridor, meaning that it may not fall below 25 per cent nor exceed 45 per cent of the undertaking’s SCR, including any capital add‑on imposed by the supervisory authority.
Irrespective of this calculation, the MCR may never be lower than the applicable start up capital requirement. The minimum amounts are currently equivalent to:
Irrespective of this calculation, the MCR may never be lower than the applicable start up capital requirement. The minimum amounts are currently equivalent to:
- EUR 4.0 million for life insurance undertakings
- EUR 2.7 million for non‑life insurance undertakings, increasing to EUR 4.0 million where the undertaking writes liability insurance or credit and suretyship insurance
- EUR 3.9 million for reinsurance undertakings, reduced to EUR 1.3 million for captive reinsurance undertakings
In addition to the SCR and MCR, insurance and reinsurance undertakings must comply with further capital, buffer and solvency requirements set out in the Financial Institutions Act and related regulations, and are subject to ongoing supervisory review by the Norwegian Financial Supervisory Authority.
-
Is there a policyholder protection scheme in your jurisdiction?
Yes. Norway has a policyholder protection scheme for non‑life insurance known as the Norwegian Non‑Life Insurance Guarantee Scheme (the “Guarantee Scheme”).
The purpose of the Guarantee Scheme is to ensure coverage of valid insurance claims under direct non‑life insurance contracts for policyholders and injured third parties where an insurance undertaking is placed under public administration. The Guarantee Scheme covers claims against insurance undertakings that are members of the scheme, provided that the claim falls within the substantive scope of the underlying insurance contract and the statutory limits of the scheme.
The Guarantee Scheme is established as a separate legal entity. Its funds are collectively owned, and no member undertaking has any proprietary right to any part of the assets of the scheme.
-
How are groups supervised if at all?
Insurance groups are subject to supplementary group supervision in addition to the solo supervision of individual insurance undertakings under the EU Solvency II Directive. The Solvency II framework is implemented in Norwegian law through the Financial Institutions Act of 2015 and the Solvency II Regulations of 2016.
Group supervision includes requirements for the calculation of group solvency on a consolidated basis, group‑level reporting of risks and capital adequacy to the Norwegian Financial Supervisory Authority (NFSA), and ongoing assessment of governance, risk management and internal control systems at group level. Insurance groups are also subject to specific rules on internal audit, risk concentration and intra‑group transactions.
In addition, insurance groups must comply with transparency and disclosure requirements, including reporting on group structure and financial position, as well as public disclosure obligations applicable under the Solvency II regime.
-
Do senior managers have to meet fit and proper requirements and/or be approved?
Yes. Members of the board, the general manager and other persons who effectively manage the insurance undertaking are subject to fit and proper requirements under Norwegian law. These requirements are assessed as part of the licensing process and apply on a continuing basis throughout the appointment.
The fit and proper assessment is based on completed suitability declarations, certificates of good conduct and other relevant information, including publicly available sources. Any subsequent changes to board members or senior management must be notified to the Norwegian Financial Supervisory Authority (NFSA), which may reassess the individual’s suitability.
Equivalent fit and proper requirements also apply to the management of insurance intermediary undertakings, including insurance brokers and agents, pursuant to the Insurance Mediation Act and related regulations. -
To what extent might senior managers be held personally liable for regulatory breaches in your jurisdiction?
As a general principle, regulatory breaches are primarily attributed to the insurance undertaking itself. However, individuals, including senior managers, may incur personal liability where breaches are committed willfully or through negligence.
Under the Norwegian Financial Institutions Act, any person who intentionally or negligently contravenes the Act or regulations issued pursuant to it may be subject to criminal sanctions, including fines or imprisonment for up to one year. This liability extends to members of the board, the general manager and other persons who effectively manage the undertaking.
In addition to criminal liability, the Norwegian Financial Supervisory Authority (NFSA) has supervisory powers to intervene at management level. Where a senior manager no longer meets the applicable fit and proper requirements as a result of regulatory breaches or other misconduct, the NFSA may require changes to the undertaking’s senior management.
Senior managers may also incur civil liability under Norwegian company law. Pursuant to the Norwegian Public and Private Limited Liability Companies Acts, members of the board, managing directors and other senior representatives may be held personally liable for losses suffered by the undertaking, shareholders or third parties where damage has been caused intentionally or negligently in the performance of their duties.
-
Are there minimum presence requirements in order to undertake insurance activities in your jurisdiction (and obtain and maintain relevant licenses and authorisations)?
The applicable presence requirements for undertaking insurance activities in Norway depend on the chosen market entry structure.
Where insurance activities are conducted through a separately incorporated Norwegian company, the undertaking must be duly registered and established in accordance with Norwegian company law. This includes a requirement to have a registered Norwegian business address, meaning a physical address stated as street name, house number, postal code and postal town. Post‑box addresses are not accepted for this purpose.
Where a foreign insurer establishes a Norwegian branch (a Norwegian‑registered foreign entity, NUF), the branch must, as a minimum, appoint a designated contact person. There is no requirement for this contact person to be resident in Norway; however, the individual must have a Norwegian national identification number or a D‑number. If such identification has not already been issued, an application for a D‑number must be submitted in connection with the branch registration.
As a general rule, there are no physical presence requirements for insurers providing services in Norway exclusively on a cross‑border basis under the EEA passporting regime. However, insurers offering compulsory motor insurance in the Norwegian market are required to appoint a claims representative or contact person who is domiciled or established in Norway.
-
Are there restrictions on outsourcing services, third party risk management and/or operational resilience requirements relating to the business?
Yes. Norwegian insurers are subject to detailed regulatory requirements and restrictions relating to outsourcing, third‑party risk management and operational resilience.
Under the EU Solvency II Directive, as implemented in Norwegian law through the Financial Institutions Act, insurers may outsource certain functions or activities, but core functions may not be delegated. Outsourcing must not be carried out in a manner or to an extent that compromises prudent business conduct, the insurer’s governance, or the Norwegian Financial Supervisory Authority’s (NFSA) ability to supervise both the outsourced activity and the undertaking as a whole.
Outsourcing is specifically regulated in section 13‑4 of the Financial Institutions Act. Insurers remain fully responsible for outsourced activities, and outsourcing arrangements must ensure appropriate risk management, internal control and contractual safeguards. As a general rule, insurers are required to notify the NFSA in advance of material outsourcing arrangements, unless an exemption applies. This notification obligation follows from section 4c of the Financial Supervision Act.
Operational resilience and ICT‑related outsourcing are subject to significantly enhanced requirements following the implementation of the EU Digital Operational Resilience Act (DORA, Regulation (EU) 2022/2554). DORA has been incorporated into Norwegian law through the Digital Operational Resilience in Finance Act and accompanying regulations, effective from 1 July 2025.
Under DORA, insurers must comply with comprehensive requirements relating to ICT risk management, incident reporting, digital operational resilience testing, and oversight of third‑party ICT service providers. This includes enhanced obligations to manage and monitor ICT‑related outsourcing arrangements, ensure business continuity and disaster recovery capabilities, and address cyber security risks throughout the supply chain. DORA therefore materially strengthens the regulatory framework governing outsourcing, third‑party risk and operational resilience for insurers operating in Norway.
-
Are there restrictions on the types of assets which insurers or reinsurers can invest in or capital requirements which may influence the type of investments held?
Yes. Insurance and reinsurance undertakings in Norway are subject to investment restrictions derived primarily from the EU Solvency II Directive, as implemented in Norwegian law through the Financial Institutions Act, as well as from general limitations on engaging in activities other than licensed insurance business.
As a starting point, an insurance undertaking may not carry out business activities other than those for which it is licensed. Investment activities are therefore permitted only insofar as they are compatible with the undertaking’s insurance operations and regulatory framework.
Under Solvency II, insurers are subject to the “prudent person principle”, which does not impose detailed quantitative investment limits but instead requires undertakings to invest assets in a manner that ensures the security, quality, liquidity and profitability of the portfolio as a whole. Assets must be invested in the best interest of policyholders and beneficiaries, with due consideration to the nature and duration of insurance liabilities. Capital requirements under the Solvency II regime, including the Solvency Capital Requirement (SCR), may in practice influence asset allocation by making certain asset classes more capital‑intensive due to their risk profile.
Under Norwegian law, previous statutory limits restricting insurance undertakings to invest no more than 15 per cent in ownership interests unrelated to insurance business have been repealed. The Financial Institutions Act no longer sets explicit quantitative thresholds for such investments. Instead, whether an undertaking’s investments amount to engaging in non‑insurance activity is assessed on a qualitative and discretionary basis by the Norwegian Financial Supervisory Authority (NFSA), taking into account factors such as the scale, purpose and risk profile of the investments.
Accordingly, while Norwegian insurers enjoy a relatively flexible investment framework, investment activities remain subject to prudential supervision, capital adequacy considerations and the overarching requirement that they do not compromise sound and prudent operation of the insurance business.
-
Are there requirements or regulatory expectations regarding the management of an insurer's reinsurance risk, including any restrictions on the level / type of reinsurance utilised?
Norwegian law does not impose fixed quantitative limits on the level or type of reinsurance that insurers or reinsurers may utilise. However, there are clear regulatory requirements and supervisory expectations regarding the management of reinsurance risk under the Solvency II framework, as implemented in Norwegian law.
Insurers are expected to take into account the nature, scale and complexity of their business when designing and maintaining their reinsurance strategy and reinsurance arrangements. Reinsurance forms an integral part of the undertaking’s overall risk management framework and must be reflected in the undertaking’s risk assessments, capital calculations and internal models where applicable. The Norwegian Financial Supervisory Authority (NFSA) may request documentation and assessments demonstrating how reinsurance arrangements mitigate risk, including analyses of how reinsurance exposure, pricing and counterparty risk are affected by systemic, global or climate‑related events over both short‑ and long‑term horizons.
Under Solvency II, insurers are also subject to enhanced disclosure and reporting obligations, including requirements to provide information on insurance products, premium calculation and the role of reinsurance, as set out in Directive 2009/138/EC. Reinsurance must be structured in a manner that supports prudent risk transfer and does not undermine the undertaking’s solvency or governance.
Pension funds and life insurance undertakings are subject to more specific qualitative expectations. In particular, pension funds must at all times maintain reinsurance that is considered satisfactory in light of the fund’s risk exposure and financial position. The board of directors is responsible for ensuring that there are updated and documented guidelines governing the nature and extent of reinsurance arrangements, and that these are effectively implemented and monitored.
Life insurance undertakings may, as a limited part of their licensed activities, assume reinsurance within the insurance classes covered by their authorisation, provided that such activities are consistent with prudential requirements and the undertaking’s overall risk profile.
-
How are sales of insurance supervised or controlled?
The marketing and sale of insurance in Norway are subject to a comprehensive regulatory framework combining financial supervision, consumer protection rules and general marketing law.
General conduct‑of‑business requirements for the sale of insurance products are set out in Chapter 16 of the Financial Institutions Act, which includes rules on pricing, product packaging, terms and conditions, and information obligations towards customers. In addition, Parts One and Two of the Norwegian Insurance Contracts Act regulate the pre‑contractual information that must be provided to customers, as well as requirements relating to the form, content and presentation of such information. These rules apply to both insurers and insurance intermediaries.
Sales carried out through insurance brokers or insurance agents are further regulated by the Insurance Mediation Act of 2021, which sets out detailed requirements relating to distribution practices, advice, conflicts of interest, remuneration structures and customer protection.
Marketing and sales activities are also subject to the Norwegian Marketing Act, which imposes general requirements on fair marketing practices, transparency and prohibition of misleading or aggressive commercial conduct. Compliance with the Marketing Act is supervised by the Consumer Authority and the Market Council.
Consumer protection is further supported through the Norwegian Consumer Advisory Council, which provides guidance to policyholders, and through access to alternative dispute resolution mechanisms. Consumers may submit complaints concerning insurers or insurance contracts to the Norwegian Financial Services Complaints Board (FinKN).
The Norwegian Financial Supervisory Authority (NFSA) supervises insurance sales primarily through its oversight of product governance, market conduct and complaint reporting. The NFSA may also initiate targeted supervisory measures and enforcement actions in individual cases where breaches are identified, either through reporting, supervisory reviews or public information, including media coverage.
-
To what extent is it possible to actively market the sale of insurance into your jurisdiction on a cross border basis and are there specific or additional rules pertaining to distance selling or online sales of insurance?
Insurance products may be actively marketed into Norway on a cross‑border basis, primarily by insurers authorised in another EEA member state operating under the freedom of services regime. However, all marketing activities targeting Norwegian consumers or businesses are subject to Norwegian marketing, consumer protection and conduct‑of‑business rules.
Marketing and advertising of insurance products must comply with the Norwegian Marketing Act and related consumer protection legislation. This includes requirements of fairness, transparency and prohibition of misleading or aggressive commercial practices. These rules apply irrespective of whether the insurer or intermediary is established in Norway or provides services from another EEA state.In addition, the provisions in Part Two of the Norwegian Insurance Contracts Act, which regulate pre‑contractual duties at insurance distribution and rights of withdrawal, must be complied with when insurance is marketed and sold into Norway, including on a cross‑border and distance‑selling basis. These provisions implement the Insurance Distribution Directive (IDD) and apply to both insurers and insurance intermediaries. They impose, inter alia, obligations to identify the customer’s demands and needs, provide mandatory pre‑contractual information, ensure appropriate presentation of information, and observe the statutory rules on withdrawal rights.
Where insurance contracts are concluded through distance selling, such as online, by telephone or other electronic means, the Act relating to the Duty of Disclosure and Right to Cancel Distance Contracts and Off‑Premises Sales (the Cancellation Act) applies. The Cancellation Act implements Directive 2011/83/EU on consumer rights and imposes detailed pre‑contractual information obligations on insurers and insurance intermediaries. Prior to the conclusion of a distance contract, consumers must be provided with extensive information on a durable medium under the consumer’s control, including information about the seller, supervisory authority, key characteristics of the insurance product, special risks, pricing, and the consumer’s right of withdrawal.
Pursuant to section 1‑7 of the Norwegian Insurance Contracts Act, electronic communication is the default means of communication, but consumers have the right to object to electronic communication at any time. Where such objection is made, contractual terms and other information must be provided on paper or another appropriate durable medium.
The Cancellation Act further grants consumers a statutory right of withdrawal. For life insurance and individual pension contracts, the withdrawal period is 30 days, while for other insurance contracts the withdrawal period is 14 days. If the right of withdrawal is exercised, the parties’ obligations under the contract lapse, and any performance already rendered must be reversed in accordance with the statutory restitution rules.
It should also be noted that Norway applies strict restrictions on direct marketing, including telephone marketing and addressed mail, where the recipient has opted out. A significant portion of the Norwegian population is registered in the national opt‑out register, which materially limits access to these marketing channels for insurers and intermediaries.
-
Are insurers in your jurisdiction subject to additional requirements or duties in respect of consumers? Are consumer policies subject to restrictions, including any pricing restrictions? If so briefly describe the range of protections offered to consumer policyholders
Yes. Consumer insurance policies in Norway are subject to extensive mandatory protections aimed at safeguarding policyholders and ensuring a high level of consumer protection.
The Norwegian Insurance Contracts Act (ICA) contains detailed mandatory provisions for the benefit of consumers, many of which cannot be derogated from to the detriment of the insured. These include strict pre‑contractual and contractual information requirements, statutory rules on the right of withdrawal, and limitations on the insurer’s ability to amend the terms of an insurance contract during the period of cover. Insurers are subject to comprehensive duties to provide clear, accurate and comprehensible information both before and throughout the contractual relationship.
Norwegian courts apply strong consumer‑protective principles when interpreting insurance contracts. Ambiguous or unclear policy terms are generally interpreted in favour of the insured. Moreover, pursuant to section 37 of the Norwegian Contracts Act, which implements the Unfair Terms in Consumer Contracts Directive (Directive 93/13/EEC), non‑negotiated contractual terms in consumer relationships may be subject to judicial control. Under this framework, contractual provisions that create a significant imbalance to the detriment of the consumer may be set aside or adjusted, and unclear terms must be interpreted in the manner most favourable to the consumer. These principles apply equally to insurance contracts and are taken into account by Norwegian courts when assessing both the interpretation and the validity of consumer insurance policy terms.
In addition, Norwegian courts may, in exceptional cases, amend or set aside contractual terms under general principles of Norwegian contract law where an agreement or specific terms are found to be unreasonable or unfair. Although the threshold for such judicial intervention is relatively high, it constitutes an important supplementary safeguard in consumer insurance relationships.
As a general rule, insurers and consumers are free to agree on the pricing of insurance premiums, and Norwegian law does not impose formal price controls on consumer insurance. However, the ICA contains rules governing premium adjustments in connection with renewal. Where an insurer significantly increases premiums, regulatory practice and case law require the insurer to notify the consumer and provide a clear explanation of the reasons for the increase. If the insurer fails to comply with applicable information duties, a premium increase may, in certain circumstances, be considered invalid.
Taken together, Norwegian consumer insurance law offers a broad range of protections, combining mandatory statutory rights, strict information obligations, consumer‑oriented principles of contractual interpretation derived from both national law and EU consumer law, judicial safeguards against unfair terms, and regulatory oversight, while generally preserving contractual freedom in pricing subject to transparency and fairness requirements.
-
Is there a legal or regulatory resolution regime applicable to insurers in your jurisdiction?
Yes. Norwegian insurers are subject to a statutory public administration and resolution regime governed primarily by the Financial Institutions Act, which implements relevant EU and EEA rules on insurance undertaking recovery and resolution, including elements derived from the Solvency II framework.
Where an insurance undertaking is in serious financial distress or fails to meet applicable solvency requirements, the Norwegian Financial Supervisory Authority (NFSA) may place the undertaking under public administration. The purpose of public administration is to safeguard policyholders’ interests, ensure an orderly handling of the undertaking’s liabilities, and, where possible, enable continued insurance coverage or an orderly transfer of insurance portfolios. The regime includes powers to restrict the undertaking’s activities, reorganise its business, or wind down operations in a controlled manner. For non‑life insurance undertakings, the public administration regime is closely linked to the operation of the Norwegian Non‑Life Insurance Guarantee Scheme.
In addition to the formal resolution framework, disputes between insurance undertakings are, in practice, often managed through binding industry standards, recourse agreements, pool arrangements and contractual frameworks governing claims handling and reimbursement. These mechanisms have contributed to reducing litigation between insurers. Where such mechanisms do not lead to resolution, disputes may be referred to ordinary court proceedings or arbitration.
Disputes between insurers and policyholders are subject to separate complaint‑handling and dispute‑resolution mechanisms. The Norwegian Financial Services Complaints Board (Finansklagenemnda / FinKN) serves as an independent alternative dispute resolution body for customers with complaints against insurance companies and other financial institutions. FinKN operates in accordance with the ADR Entities Act and relevant provisions of the Insurance Contracts Act. The board is composed of independent experts in law, finance and consumer affairs and provides a specialised, accessible and efficient forum for resolving consumer disputes outside the courts.
-
Are the courts adept at handling complex commercial claims?
Norwegian judges are generally generalist judges, and there are no specialised commercial courts. However, the courts have extensive experience handling complex commercial disputes, including sophisticated insurance and financial matters.
In complex cases, the courts may be constituted with expert lay judges alongside the professional judge, allowing for specialised competence to be brought into the adjudication where appropriate. Ordinary Norwegian judges are accustomed to dealing with technically and legally complex insurance law issues, including large‑scale commercial disputes.
Overall, Norwegian courts are regarded as well equipped to handle complex commercial claims in an efficient and predictable manner. Nevertheless, arbitration is sometimes chosen as an alternative dispute resolution mechanism in particularly complex or international commercial matters, especially where parties seek confidentiality or flexibility in procedure.
-
Is alternative dispute resolution well established in your jurisdictions?
Yes. Alternative dispute resolution (ADR) is well established in Norway and is frequently used as an alternative to ordinary court litigation.
Mediation is commonly employed, both on a voluntary, out‑of‑court basis and in the form of court‑connected mediation, which is actively encouraged by Norwegian courts as a means of resolving disputes efficiently and cost‑effectively. Mediation is widely used in commercial matters, including insurance disputes.
The use of arbitration is also well established in Norway, particularly in commercial and insurance‑related disputes. Arbitration clauses are frequently included in commercial insurance policies and reinsurance agreements, especially where the parties seek confidentiality, specialist decision‑makers or procedural flexibility.
It should also be noted that the Conciliation Board (Forliksrådet) functions as the court of first instance in certain cases, including where the value of the claim is below NOK 200,000 or where one of the parties is not represented by a Norwegian lawyer. The Conciliation Board plays an important role in facilitating early settlement of disputes.
In the insurance sector, disputes between financial institutions and consumers may also be resolved by the Norwegian Financial Services Complaints Board (Finansklagenemnda / FinKN). FinKN is a specialised, quasi‑judicial dispute resolution body that handles complaints relating to insurance, banking, financing, investment products and debt collection. The board is composed of specialised members and provides a low‑cost, accessible alternative to court proceedings. While its decisions are not formally binding, they are generally respected and complied with by the parties.
-
Is there a statutory transfer mechanism available for sales or transfers of books of (re)insurance? If so briefly describe the process
Norwegian law does not provide for a specific statutory transfer or portfolio transfer mechanism governing the sale or transfer of books of insurance or reinsurance comparable to schemes found in some other jurisdictions.
As a general rule, agreements relating to the sale or transfer of insurance portfolios are governed by general principles of Norwegian contract law, and are primarily limited by the parties’ contractual arrangements rather than by a dedicated statutory framework.
However, notwithstanding the absence of a specific portfolio transfer regime, the regulatory framework effectively imposes substantive requirements on such transactions. As noted under questions 2 and 4, it is an absolute requirement that all insurers and reinsurers operating in Norway hold a valid licence issued by the Norwegian Financial Supervisory Authority (NFSA). This implies that any purchaser of a book of insurance must itself be authorised to carry out the relevant insurance activity and satisfy the applicable regulatory requirements.
Different regulatory regimes apply to non‑life insurance undertakings, life insurance undertakings and credit or guarantee insurers under the Financial Institutions Act and related regulations. Accordingly, an acquiring undertaking must meet the same regulatory, organisational and capital requirements applicable to the type of insurance business comprising the transferred portfolio. The NFSA must be notified of the transaction and may, depending on its structure and implications, require prior approval.
Reinsurance activities are subject to a separate licensing requirement. Although there is no distinct statutory framework governing the transfer of reinsurance portfolios, reinsurance undertakings must comply with the licensing and prudential requirements applicable to the underlying insurance activity. Reinsurance contracts are generally treated as ordinary commercial contracts subject to general principles of Norwegian contract law and other applicable legislation.
-
What are the primary challenges to new market entrants? Are regulators supportive (or not) of new market entrants?
The Norwegian insurance market is highly competitive and relatively concentrated, with a limited number of large, well‑established domestic insurers accounting for a significant share of the market. This creates notable entry barriers for new market participants, particularly in mass‑market consumer segments where brand recognition, distribution strength and pricing power are key competitive factors. At the same time, the market has seen a gradual increase in the presence of smaller and niche players over time, reflecting the role of insurance brokers, cross‑border placements and agency‑based distribution models in facilitating market access.
One of the primary challenges for new entrants is the stringent regulatory and compliance framework governing insurance activities in Norway. The licensing process, capital and solvency requirements under Solvency II, governance and reporting obligations, as well as extensive consumer‑protection rules, impose significant regulatory and operational costs. Compliance with these requirements may represent a substantial hurdle, particularly for smaller or first‑time entrants.
There is tough competition in the Norwegian insurance market. Four large domestic actors hold more than 70 per cent of the market shares. However, the smaller actors have increased from a market share of 6 per cent in 2000 and up to approximately 23 percent in 2023. This is mainly a result of insurance brokers placing business abroad, combined with an increasing number of insurance agents with their own brand that makes it possible for them to change insurers. The Norwegian insurance market is highly regulated, and thus compliance could be a challenge to new market entrants.
From a regulatory perspective, the Norwegian Financial Supervisory Authority is generally regarded as predictable and neutral rather than protectionist. While the authority maintains strict standards for authorisation, governance, capital adequacy and conduct of business, the framework is applied consistently to domestic and foreign undertakings alike. Regulators are primarily focused on financial stability, consumer protection and market integrity, rather than on limiting competition. As a result, new market entrants can expect a structured and transparent approval process, but not regulatory relaxation or preferential treatment.
In summary, the main challenges for new entrants lie in market concentration, high regulatory and compliance thresholds, and the need to establish effective distribution and brand positioning in a mature market. At the same time, the regulatory environment is supportive in the sense that it is non‑discriminatory and open to innovation, provided that entrants meet the applicable prudential and conduct‑of‑business requirements.
-
To what extent is the market being challenged by digital innovation?
Digitalisation is a clear strategic focus for the Norwegian insurance market. Norway has long been at the forefront of digital development, and almost the entire population has access to secure digital identification through BankID, which provides a strong foundation for digital service delivery and customer interaction.
Several insurers have implemented digital solutions for onboarding, policy administration and the handling of simpler claims, including increased automation of claims processes for standardised products. However, despite these developments, the level of disruptive digital innovation within the insurance sector remains relatively limited. While there are some examples of new concepts and business models, as well as a small number of insurtech‑driven initiatives, the Norwegian insurance market is still largely characterised by traditional players and incremental innovation rather than fundamentally new approaches.At the same time, digitalisation has introduced new risk and control challenges. Developments in artificial intelligence have contributed to a growing number of attempted insurance fraud cases, particularly through the use of AI‑generated images and manipulated documentation in claims handling. Insurers are also increasingly confronted with complaints and correspondence drafted with the assistance of generative AI. Such communications may create unrealistic or unfounded expectations on the part of policyholders regarding coverage or claims outcomes, which places additional demands on insurers’ complaint‑handling procedures and customer communication.
Overall, while digital tools and automation are becoming more prevalent, the Norwegian insurance market is best described as being in a transitional phase, where digitalisation primarily enhances existing processes rather than fundamentally reshaping the market. The full impact of insurtech, artificial intelligence and data‑driven insurance models is therefore still unfolding.
-
How is the digitization of insurance sales and/or claims handling treated in your jurisdiction, for example is the regulator in support (are there concessions to rules being made) or are there additional requirements that need to be met?
The digitisation of insurance sales and claims handling is well established in Norway. The majority of insurance products are distributed online or by telephone, and digital claims handling is widely used, particularly for standardised and lower‑complexity products.
From a regulatory perspective, digitisation is generally supported, but not through exemptions from substantive legal requirements. Instead, insurers are expected to meet existing regulatory standards using digital solutions that ensure an equivalent or higher level of protection compared to traditional processes.
To comply with anti‑money laundering (AML) and data protection requirements, insurers must have robust and secure systems for customer identification, data processing and record‑keeping throughout both the sales process and claims handling. Supervision in this area is carried out primarily by the Norwegian Financial Supervisory Authority (Finanstilsynet) and the Norwegian Data Protection Authority (Datatilsynet).
Datatilsynet generally does not regard ordinary email as a sufficiently secure communication channel unless appropriate encryption is used. As a result, most insurers operating in Norway rely on secure digital platforms, typically combined with electronic identification through BankID, which is widely accepted and trusted as a secure means of authentication.
Several provisions of the Norwegian Insurance Contracts Act (ICA) require that certain notices and declarations from insurers be given “in writing”, for example in connection with denial of coverage, termination of insurance contracts or other significant contractual actions. Following the amendments to the ICA that entered into force on 1 July 2022, electronic communication satisfies the statutory requirement of written communication, provided that the insured has not objected to electronic communication and that the insurer ensures that such communication is carried out in a reliable and satisfactory manner. Where electronic communication contains information of particular importance for the recipient, the insurer must also take appropriate steps to ensure that the information has actually been received. The insured must be given the opportunity to opt out of electronic communication either at the conclusion of the contract or at the insurer’s first electronic contact with the insured.
Online and telephone sales of insurance are furthermore subject to the Act relating to the Duty of Disclosure and Right to Cancel Distance Contracts and Off‑Premises Sales (the Cancellation Act). This legislation imposes additional pre‑contractual information obligations and grants consumers a statutory right of withdrawal, as described under question 22.
Overall, Norwegian regulators are supportive of digitalisation as a means of increasing efficiency and accessibility, but digitised sales and claims handling are subject to strict requirements relating to security, documentation, consumer protection and effective communication, rather than regulatory concessions or relaxed standards.
-
To what extent is insurers' use of customer data subject to rules or regulation?
Insurers’ use of customer data in Norway is subject to extensive regulation under the EU General Data Protection Regulation (GDPR), which applies in Norway through the Norwegian Personal Data Act. As a member of the European Economic Area (EEA), Norway applies the GDPR with the same legal effect as EU member states.
Under the GDPR framework, insurers must have a lawful basis for the processing of personal data. While consent may constitute a lawful basis in certain situations, insurers typically rely on other legal grounds, such as the necessity of processing for the performance of an insurance contract, compliance with legal obligations, or legitimate interests. Where consent is used, it must be freely given, specific, informed and unambiguous, and the consumer must be informed of the right to withdraw such consent at any time.
The processing of special categories of personal data, including health data frequently relevant in insurance underwriting and claims handling, is subject to heightened requirements under the GDPR, including stricter safeguards, documentation obligations and limitations on purpose and scope of use.
Compliance with data protection rules is supervised primarily by the Norwegian Data Protection Authority (Datatilsynet), which has broad enforcement powers, including the ability to issue orders, impose corrective measures and levy administrative fines in line with GDPR standards. In parallel, the Norwegian Financial Supervisory Authority (Finanstilsynet) oversees insurers’ use of customer data in the context of insurance operations, governance, outsourcing and consumer protection, ensuring that data processing practices are consistent with prudential requirements and sound business conduct.
Overall, insurers’ use of customer data in Norway is closely regulated, with stringent substantive and procedural requirements, limited scope for discretionary use of personal data, and active supervision by both data protection and financial supervisory authorities.
-
To what extent are there additional restrictions or requirements on sharing customer data overseas/on a cross-border basis?
Transfers of personal data within the EU/EEA are generally permitted, provided that the processing complies with the substantive requirements of the GDPR. In such cases, no additional transfer mechanism is required, as all EU/EEA member states are subject to the same data protection framework.
The protection afforded by the GDPR is considered to “travel with the data”, meaning that GDPR requirements continue to apply to the processing of personal data irrespective of where the data is stored or accessed. This principle is particularly relevant for insurers using cross‑border service providers, cloud solutions or group‑wide data platforms.
Transfers of personal data to countries outside the EU/EEA (“third countries”) are subject to additional restrictions and may only take place if the conditions set out in Chapter V of the GDPR are met. The primary consideration is whether the European Commission has adopted an adequacy decision in respect of the relevant third country or international organisation, confirming that it ensures an adequate level of data protection.
Where no adequacy decision exists, transfers may still be permitted if appropriate safeguards are implemented, such as standard contractual clauses or binding corporate rules, or in limited cases based on specific derogations for particular situations or individual transfers, provided that the strict conditions under the GDPR are satisfied.
Accordingly, while cross‑border data transfers are not prohibited as such, insurers must carefully assess and document the legal basis for any transfer of customer data outside the EU/EEA and ensure continuous compliance with GDPR requirements.
-
To what extent are insurers subject to ESG regulation or oversight? Are there regulations/requirements, including in connection with managing climate change and climate change related financial risks specific to insurers? If so, briefly describe the range of measures imposed.
Insurers operating in Norway are subject to increasingly comprehensive ESG‑related regulation and supervisory expectations, largely derived from EU law and implemented through the EEA Agreement, Norwegian legislation and supervisory practice. The regulatory framework continues to evolve and is closely aligned with the EU Green Deal, national climate policy objectives and guidance from the European supervisory authorities.
Supervisory oversight – NFSA
The Norwegian Financial Supervisory Authority (NFSA) supervises insurers’ handling of ESG and sustainability risks as part of its broader prudential and conduct‑of‑business supervision. In line with Solvency II, the NFSA focuses in particular on insurers’ risk assessments, governance, internal control systems and solvency, including the integration of sustainability risks and climate‑related financial risks into enterprise‑wide risk management.
Pursuant to amendments to the Solvency II regulatory framework implemented in Norway, insurers are required to identify material exposures to climate‑related risks and assess the potential impact of climate change through scenario analyses. These requirements entered into force on 3 February 2023, with proportionality applied to smaller and low‑risk undertakings. In practice, insurers are expected to incorporate climate risk assessments into their Own Risk and Solvency Assessment (ORSA) processes. While most Norwegian insurers have started this work, supervisory reviews and surveys have shown that further development is required, particularly with respect to quantitative and long‑term climate risk analyses.
Solvency II and sustainability risk integration
EU Regulation 2021/1256, which has been incorporated into Norwegian law, insurers are required to integrate sustainability risks, including climate risks, into their risk management, governance arrangements and internal control frameworks. EIOPA regularly assesses the calibration of capital requirements for natural catastrophe risk and monitors whether environmentally or socially targeted assets are appropriately reflected within the Solvency II framework.
Sustainable finance legislation
Norway adopted a dedicated Sustainable Finance Act, which entered into force on 1 January 2023. The Act implements key EU sustainable finance regulations into Norwegian law, including:
- the EU Taxonomy Regulation, and
- the Sustainable Finance Disclosure Regulation (SFDR).
These rules impose disclosure obligations on insurers, particularly where they offer insurance‑based investment products, requiring transparency on how sustainability risks are integrated and to what extent underlying investments are aligned with environmental objectives under the taxonomy.
The taxonomy‑related reporting obligations initially apply to large listed insurance undertakings with more than 500 employees, but are expected to be extended over time to encompass a broader range of large companies, regardless of listing status.
Sustainability reporting – Accounting Act and CSRD
Norwegian insurers are also subject to statutory sustainability reporting requirements under the Norwegian Accounting Act. Amendments effective from July 2021 expanded the scope of mandatory non‑financial reporting to include ESG‑related matters such as human rights, labour conditions, social factors, environmental impacts, anti‑corruption measures, gender equality and non‑discrimination.In addition, Norway has implemented the Corporate Sustainability Reporting Directive (CSRD) through amendments to the Accounting Act adopted in June 2024. CSRD is being phased in from the 2024 financial year, starting with large public‑interest entities such as listed insurance companies, which must submit expanded sustainability reports in accordance with the European Sustainability Reporting Standards (ESRS) and the principle of double materiality. Further categories of large companies will be included from later reporting years. These new requirements supplement, rather than replace, existing Norwegian obligations relating to equality reporting and due diligence assessments.
Summary
Overall, insurers in Norway are subject to multi‑layered ESG regulation and oversight, combining prudential supervision of climate and sustainability risks under Solvency II, detailed disclosure and reporting obligations under sustainable finance and accounting legislation, and evolving supervisory expectations shaped by EU‑level regulatory developments. ESG considerations are now firmly embedded in insurers’ governance, risk management, reporting and investment activities, and further regulatory expansion in this area is expected.
-
Is there a legal or regulatory framework in respect of diversity and inclusion to which (re)insurers in your jurisdiction are subject?
Yes. Insurers and reinsurers in Norway are subject to a clear legal and regulatory framework on diversity, inclusion and non‑discrimination.
The Equality and Anti‑Discrimination Act, in force since 1 January 2018, prohibits direct and indirect discrimination on grounds such as gender, ethnicity, religion, disability and sexual orientation, and applies fully to insurance undertakings. Companies with more than 50 employees are required to assess gender equality (including pay), implement measures and report annually on this work.
In addition, statutory gender balance requirements for corporate boards were extended in December 2023. These rules, previously applicable mainly to public limited companies (ASA), now also apply to qualifying private limited companies (AS), including insurance undertakings meeting certain size thresholds. The requirements are being phased in, with the first compliance deadline in June 2025.
Insurers are also subject to the Transparency Act, which imposes obligations to carry out and report on due‑diligence assessments related to human rights and decent working conditions, including in supply chains. Covered insurers must publish an annual report by 30 June and respond to information requests from the public.
From a supervisory perspective, the Norwegian Financial Supervisory Authority (NFSA) applies revised EBA guidelines on internal governance, which require financial institutions to address risks related to discrimination, ESG factors and equality within their governance and risk management frameworks, on a proportional basis.
-
Over the next five years what type of business do you see taking a market lead?
Over the next five years, we expect insurers that combine specialised risk coverage, preventive services, strong analytical capabilities and cross‑border cooperation to take a leading position in the Norwegian insurance market.
The Covid‑19 pandemic served as a structural wake‑up call, significantly increasing awareness of exposure to business interruption, consequential loss and loss of profit risks. This development is reinforced by a more volatile economic environment characterised by higher interest rates, inflationary pressure and currency fluctuations, which heighten financial and operational risk across both corporate and consumer segments. As a result, demand for directors’ and officers’ (D&O) liability insurance and professional liability insurance is expected to remain strong.
At the same time, cyber risk is becoming one of the most decisive growth areas. Cybercrime does not respect national borders, and we see a clear need for stronger cross‑border and regional cooperation, both among insurers and in cooperation with other market participants. Recent initiatives, such as Tryg’s establishment of a dedicated Nordic cyber unit, underline the strategic importance of moving beyond purely national approaches. Insurers offering cyber products that combine traditional coverage with preventive services, incident response and coordinated cross‑border expertise are likely to gain a significant competitive advantage.
In parallel, Norway is experiencing a growing challenge related to organised crime, often coordinated through international networks engaging in organised theft, money laundering and coordinated fraud schemes. As with cyber risk, addressing these threats will require cross‑border cooperation, including closer dialogue between insurers, law enforcement authorities, customs authorities and industry associations. Insurers capable of integrating such cooperation into underwriting, claims handling and fraud prevention are expected to be better positioned in the market.
Climate change and natural catastrophe risk continue to reshape the Norwegian risk landscape. Extreme weather events and climate‑related damage are occurring more frequently, resulting in record‑high compensation payouts under natural disaster schemes in recent years. Going forward, we see a strong need for interdisciplinary and preventive collaboration, involving public authorities, municipalities, insurers, housing associations, loss adjusters, weather service providers and other data‑rich stakeholders. Access to and utilisation of large datasets across sectors will enable more refined risk assessments, better‑tailored insurance products and more dynamic pricing models.
Finally, artificial intelligence and advanced analytics will increasingly influence underwriting, claims handling, fraud detection and climate scenario modelling. At the same time, AI challenges traditional actuarial assumptions by changing risk patterns faster than historical data can capture. Insurers that successfully integrate AI into governance, pricing and risk management frameworks—while maintaining regulatory robustness—are likely to strengthen their market position.
Overall, market leadership is expected to shift towards insurers that offer tailored risk solutions, preventive and advisory services, advanced data utilisation and cross‑border collaboration, combined with a strong ability to adapt to emerging technological, environmental and regulatory risks.
Norway: Insurance & Reinsurance
This country-specific Q&A provides an overview of Insurance & Reinsurance laws and regulations applicable in Norway.
-
How is the writing of insurance contracts regulated in your jurisdiction?
-
Are types of insurers regulated differently (i.e. life companies, reinsurers?)
-
Are insurance brokers and other types of market intermediary subject to regulation?
-
Is authorisation or a licence required and if so how long does it take on average to obtain such permission? What are the key criteria for authorisation?
-
Are there restrictions or controls over who owns or controls insurers (including restrictions on foreign ownership)?
-
Is it possible to insure or reinsure risks in your jurisdiction without a licence or authorisation? (i.e. on a non-admitted basis)?
-
Is a branch of an overseas insurer, insurance broker and/or other types of market intermediary in your jurisdiction subject to a similar regulatory framework as a locally incorporated entity?
-
Are there any restrictions/substance limitations on branches established by overseas insurers?
-
What penalty is available for those who operate in your jurisdiction without appropriate permission?
-
How rigorous is the supervisory and enforcement environment? What are the key areas of its focus?
-
How is the solvency of insurers (and reinsurers where relevant) supervised?
-
What are the minimum capital requirements?
-
Is there a policyholder protection scheme in your jurisdiction?
-
How are groups supervised if at all?
-
Do senior managers have to meet fit and proper requirements and/or be approved?
-
To what extent might senior managers be held personally liable for regulatory breaches in your jurisdiction?
-
Are there minimum presence requirements in order to undertake insurance activities in your jurisdiction (and obtain and maintain relevant licenses and authorisations)?
-
Are there restrictions on outsourcing services, third party risk management and/or operational resilience requirements relating to the business?
-
Are there restrictions on the types of assets which insurers or reinsurers can invest in or capital requirements which may influence the type of investments held?
-
Are there requirements or regulatory expectations regarding the management of an insurer's reinsurance risk, including any restrictions on the level / type of reinsurance utilised?
-
How are sales of insurance supervised or controlled?
-
To what extent is it possible to actively market the sale of insurance into your jurisdiction on a cross border basis and are there specific or additional rules pertaining to distance selling or online sales of insurance?
-
Are insurers in your jurisdiction subject to additional requirements or duties in respect of consumers? Are consumer policies subject to restrictions, including any pricing restrictions? If so briefly describe the range of protections offered to consumer policyholders
-
Is there a legal or regulatory resolution regime applicable to insurers in your jurisdiction?
-
Are the courts adept at handling complex commercial claims?
-
Is alternative dispute resolution well established in your jurisdictions?
-
Is there a statutory transfer mechanism available for sales or transfers of books of (re)insurance? If so briefly describe the process
-
What are the primary challenges to new market entrants? Are regulators supportive (or not) of new market entrants?
-
To what extent is the market being challenged by digital innovation?
-
How is the digitization of insurance sales and/or claims handling treated in your jurisdiction, for example is the regulator in support (are there concessions to rules being made) or are there additional requirements that need to be met?
-
To what extent is insurers' use of customer data subject to rules or regulation?
-
To what extent are there additional restrictions or requirements on sharing customer data overseas/on a cross-border basis?
-
To what extent are insurers subject to ESG regulation or oversight? Are there regulations/requirements, including in connection with managing climate change and climate change related financial risks specific to insurers? If so, briefly describe the range of measures imposed.
-
Is there a legal or regulatory framework in respect of diversity and inclusion to which (re)insurers in your jurisdiction are subject?
-
Over the next five years what type of business do you see taking a market lead?