🇳🇴

Datatilsynet (Norway)

Data protection authority of Norway

Total Actions

197

Total Fines

€50.5M

Average Fine

€510K

Among actions with fines

Enforcement Factor

1.50

Moderately active

About Datatilsynet (Norway)

The Datatilsynet (Norway) is Norway's data protection authority and an active enforcer of GDPR and ePrivacy requirements. Datatilsynet (Norway) has taken 197 enforcement actions resulting in €50,476,395 in total penalties, with an average fine of €510K per sanctioned entity. The authority maintains a balanced enforcement approach (enforcement factor: 1.5), combining deterrent fines with corrective orders. Its most significant action was a €17,400,000 fine against Elkjøp Nordic AS in 2026. Key enforcement areas include third-party cookies without consent, misleading banner messaging, cookies placed before consent. The most frequently cited legal basis in Datatilsynet (Norway)'s decisions is Art. 6(1)(f) GDPR and Art. 6(GDPR).

Enforcement by Year

YearActionsTotal Fines
20171€0
20195€534K
202028€896K
202159€20.8M
202247€1.0M
202323€5.4M
202422€1.8M
20258€730K
20264€19.2M

Frequently Asked Questions

How many GDPR and ePrivacy actions has Datatilsynet (Norway) issued?

Datatilsynet (Norway) has issued 197 enforcement actions related to GDPR and ePrivacy, totaling €50.5M.

What is Datatilsynet (Norway)'s largest GDPR and ePrivacy fine?

The largest was a €17.4M fine against Elkjøp Nordic AS on 2026-06-01.

What violations does Datatilsynet (Norway) enforce most?

The most commonly enforced violations by Datatilsynet (Norway) are third-party cookies without consent, misleading banner messaging, cookies placed before consent.

Explore More