When is consent required for cookies in Norway?
Consent is required for any storing or reading of information in the user's device, except what is strictly necessary to deliver the service the user asked for or to carry out the transmission. Consent must be freely given, specific, informed and expressed by an active choice, and it must be as easy to withdraw as it was to give. Analytics, marketing and sharing with third parties are not strictly necessary and cannot be pre-ticked.
Source
- Reference
- Electronic Communications Act section 3-15, cf. GDPR (EU) 2016/679 Article 4(11) and Article 7
- Acts
- Personal Data Act
- Area
- Data protection and trust services
- Read date
- 2026-09-09
Other acts in the same area
- Act on electronic trust services · LOV-2018-06-15-44
Questions and answers
Ready-made pack
GDPR incident pack
total 98.75 € (about 107 USD)
The basis for what you just read, ready for the file.
What you need once a personal data breach has happened: the notification articles, the risk profile and a ready evidence chain.
Evidence chain, hash and read date per row. One-time purchase, delivered instantly.
Next step
Three ways to put the register to work in your own practice.
Start with your task
Litigation
Find support in a judgment
Search guiding decisions, see what became final and follow changes in the law.
In-house, deals
Map the rules in a transaction
Move from theme to act and on to the article that carries the duty.
Compliance
Assess the risk in a process
Risk scoring per legal area, with the sources behind every score.