Data localization and regulation of non-personal data
Jump to
Data localization and regulation of non-personal data Start Comparison
Are there data localization/data residency or other types of laws that may require the retention and storage of data in the local jurisdiction, or prohibit the transfer of data out of the jurisdiction?

Last review date: 27 December 2024

Yes.

☒     b)     other laws that may require the retention and storage of personal data (including, for example, where such data is part of another type of record or dataset) in the local jurisdiction or otherwise prohibit the transfer or disclosure of the personal data outside of the local jurisdiction:

☒         tax or financial record laws

☒        other

If a company wishes to store electronic accounting documents outside of Norway, the Norwegian Tax Administration must be notified and/or grant approval, depending on the location of the storage.

Paper based accounting documents must be stored in Norway.

Does law or regulation impose mandatory requirements to share or make accessible non-personal data?

Last review date: 27 December 2024

         Obligation for public sector organizations to share or make accessible non-personal data

         Obligation for private organizations to share or make accessible non-personal financial data

         Obligation for private organizations to share or make accessible other non-personal data

Act relating to the right of access to documents held by public authorities and public undertakings (Freedom of Information Act): This law grants citizens the right to access documents and information held by public authorities, with exceptions for sensitive data. Case documents, journals, and similar registers for the entity are open for inspection unless otherwise stipulated by law or regulations based on legal authority. Anyone can request access to case documents, journals, and similar registers from the relevant entity. Although the law primarily applies to public authorities, it can also require private actors to share information Under section 2 of the law.

Act on financial institutions and financial groups (Financial Institutions Act) sections 13-8 requires financial institutions to report on regulatory capital, capital requirements, and other matters necessary to assess the risks of their operations. As a general rule, this data should not be shared with the public but must be provided to the public authority that is entitled to it.

What specific obligations do these data-sharing rules impose on private organizations?

Last review date: 27 December 2024

         Obligation to share data on request

         Obligation to share data proactively