Data Protection Laws of the World Handbook: Second Edition - Norway

LAW

A contracting party to the European Economic Area ("EEA") Agreement, Norway implemented the EU Data Protection Directive 95/46/EC in April 2000 with the Personal Data Act 2000 ("Act"). Enforcement is through the Data Protection Authority ("DPA").

DEFINITION OF PERSONAL DATA

Any information and assessments that may be linked to a natural person (the Act section 2, number 1).

DEFINITION OF SENSITIVE PERSONAL DATA

Information relating to a) racial or ethnic origin, or political opinions, philosophical or religious beliefs, b) the fact that a person has been suspected of, charged with, indicted for or convicted of a criminal act, c) health, d) sex life, or e) trade union membership (the Act section 8).