Ask Reggi Your Question Now
Can you summarize Personal Data Act 2000 (in English)?
Norway Laws - Others > Personal Data Act 2000 (in English)
Short Summary
The Personal Data Act 2000 governs the processing of personal data in Norway. Its purpose is to protect natural persons from violation of their right to privacy through the processing of personal data. The Act applies to controllers who are established in Norway, processors who process personal data on behalf of the controller, and data subjects. It defines key terms such as personal data, processing of personal data, personal data filing system, controller, processor, data subject, consent, and sensitive personal data. The Act sets out the substantive scope, territorial extent, and relationship to other Acts. It establishes conditions for the processing of personal data, including sensitive personal data, and outlines the rights of data subjects. The Act also addresses data security, internal control, and the use of national identity numbers. It provides for the right of access to personal data, rectification of deficient personal data, and prohibition against storing unnecessary personal data. The Act regulates the transfer of personal data to other countries and includes provisions on video surveillance. The Data Inspectorate and the Privacy Appeals Board are responsible for supervision and enforcement, with penalties for non-compliance.
Whom does it apply to?
Controllers who are established in Norway, processors who process personal data on behalf of the controller, and data subjects
What does it govern?
Processing of personal data
What are exemptions?
Processing of personal data carried out by a natural person for exclusively personal or other private purposes
What are the Penalties?
Fines or imprisonment for a term not exceeding one year, or both
Jurisdiction
Norway