Jurisdiction-specific data protection, defamation law, and removal process information for Norway. Last reviewed 2025.
Datatilsynet (Norwegian Data Protection Authority) is the supervisory authority for data protection in Norway. Individuals can file erasure and data-related complaints directly with this authority.
GDPR (EU 2016/679) as incorporated via the EEA Agreement; Norwegian Personal Data Act (Personopplysningsloven 2018)
Norway implemented GDPR through its EEA membership. The Datatilsynet actively enforces erasure rights and has issued significant fines under GDPR provisions, including against major international companies operating in Norway.
Norwegian defamation law (injurie, ærekrenkelse) is codified in the Norwegian Penal Code (Straffeloven), Chapters 23 and 24. Online defamation is covered. The Press Complaints Commission (PFU) handles complaints about press conduct, applying the Norwegian Code of Ethics (Vær Varsom-plakaten).
Complaints to the Datatilsynet can result in binding decisions and fines. Norwegian courts can issue interim injunctions for content removal. The PFU handles journalistic complaints, and upheld complaints are published â creating reputational pressure on publishers.
Common Norwegian sources requiring removal include VG.no, Dagbladet, Aftenposten, TV2.no, NRK.no, and regional newspapers across Norway's regions.
Norway's strong press freedom tradition means the Press Complaints Commission route is often preferable for news content disputes, while GDPR tools are more effective for erasure from directories, databases, and search results.