Data Protection

Data Protection

Data protection refers to the right to privacy and the right to determine how your personal data is used. Most enterprises process some personal data and are therefore subject to the Norwegian Data Protection Act.

On 25 May 2018 new data protection regulations will enter into force in Norway with the adoption of the EU’s General Data Protection Regulation. The Regulation will impose new and more stringent requirements on enterprises. 

Breaches of data protection regulations can result in loss of reputation, being reported to the authorities, liability to pay compensation, and fines from the Norwegian Data Protection Authority.

In recent years the Norwegian Data Protection Authority has imposed record-high fines. The EU’s new Data Protection Regulation will increase these fines to the greater of EUR 20 million and 4 per cent of a company’s global sales.

BDO has extensive experience of assisting enterprises in complying with data protection regulations.  

We can help you with:

  • Preparing to implement the EU’s General Data Protection Regulation
  • Assessing whether your enterprise’s procedures comply with Best Practice
  • Preparing and implementing required procedures
  • Ensuring satisfactory data security
  • Acting as the enterprise’s Data Protection Officer/expert support
  • Preparing data protection declarations
  • Preparing data processor agreements
  • Training, courses and presentations