Data centre developers should consider early who will qualify as the ‘operator’ under Norway’s Data Centre Regulation, since that entity will need the building and infrastructure to support ISO and other certifications. Norway’s Electronic Communications Act and Data Centre Regulations impose security, preparedness and information requirements on data centre operators. Determining who qualifies as the ‘operator’ is not always straightforward, particularly where a facility owner, colocation provider and customer are involved in the same data centre.
Neither the Electronic Communications Act nor the Data Centre Regulation requires ISO or other certifications outright. In practice most operators pursue them anyway, as certifications are the fastest way to prove compliance to authorities, customers and end-users alike. Operators may face certification requirements as a condition for doing business, as enterprise and hyperscale customers increasingly require such certifications in their