Data Privacy (GDPR)
Does your company have control with data privacy compliance?
The Norwegian Data Protection Authority supervises businesses' compliance with the data privacy regulations and can, among other things, impose a fee in the event of non-compliance or order a halt to the processing of personal data. In addition, consumers, employees and society expect that businesses process personal data in a legal and responsible manner.
The Personal Data Act and the GDPR set a number of requirements for businesses that process personal data. Businesses that do not comply with the regulations thus risk a significant loss of reputation should personal data be lost or made available to others.
The personal data regulations are complex, and it can be challenging to know how to proceed in order to comply with all the requirements and expectations.
Our team is specialized in data privacy and has extensive experience in assisting businesses, organizations and the public sector with compliance with data privacy regulations. We have assisted businesses in a number of industries, including health, banking and finance, and technology.
Contact us here for information on how we can assist your business in complying with the Personal Data Act and the GDPR →
What is GDPR?
GDPR is legislation from the EU concerning data privacy (General Data Protection Regulation). Norway is obliged to make the GDPR into Norwegian law, through the EEA agreement. GDPR has therefore become part of the Norwegian Personal Data Act.
This means that all the requirements that follow from the GDPR also follow from the Personal Data Act. The Personal Data Act and the GDPR aim to protect the personal data of natural persons.
We assist with, among other things
Revision of the company's privacy program
Assistance for the preparation of privacy documents, including routines for deletion, data subject's rights, protocol of processing activities, data processing agreement, privacy statement, etc.
Risk - and data protection impact assessment
Transfer of personal data outside the EU/EEA
Personal data breach
Legal assessments of data privacy issues
Data protection by design and by default
Training of management and employees
