Norway: Enforcement of new law on personal data

Earlier this spring, the Norwegian Parliament passed a new law on personal data, implementing the GDPR in Norway. In the cabinet meeting on 15 June it was decided that the new Personal Data Act enters into force on the day the decision incorporating the regulation in the EEA Agreement enters into force. On 6 July it was agreed in the EEA Committee that the GDPR should be incorporated in the EEA Agreement. The decision on incorporation was supposed to take effect the day after all the EEA/EFTA countries have set aside their constitutional reservations. Only Liechtenstein took constitutional reservation with the decision to incorporate. Liechtenstein abrogated the constitutional reservation on 19 July, thus the decision on incorporation and the new Personal Data Act came into force accordingly on 20 July 2018.