Duty LXD-3466
Makes education decisions, in Norway
Each law's tag says when it binds: since in force proposed proposed
Personal Data Act, Automated Decisions in Norwaysince 4 lines
Personopplysningsloven (LOV-2018-06-15-38) § 1, incorporating Regulation (EU) 2016/679, Arts. 13(2)(f), 14(2)(g), 15(1)(h) and 22 · Read the law's page
- Where a decision based solely on automated processing about a person in Norway rests on a contract with them or on their explicit consent, put suitable safeguards in place, at least the right to obtain human intervention, to express their point of view and to contest the decision, under the incorporated GDPR Article 22(3).
- Do not subject a person in Norway to a decision based solely on automated processing, including profiling, that produces legal effects concerning them or similarly significantly affects them, unless the decision is necessary for entering into or performing a contract with them, is authorised by a law that also lays down suitable measures to safeguard their rights, or rests on their explicit consent, under the incorporated GDPR Article 22(1) and (2).
- Do not base a solely automated decision with legal or similarly significant effects on a person in Norway on the special categories of personal data in the incorporated GDPR Article 9(1), unless they gave explicit consent or the processing is necessary for reasons of substantial public interest on the basis of a proportionate law, and suitable measures to safeguard their rights are in place, under the incorporated GDPR Article 22(4).
- If you make solely automated decisions about a person in Norway of the kind the incorporated GDPR Article 22(1) and (4) describe, including profiling, tell them so and give them meaningful information about the logic involved and the significance and envisaged consequences for them: when you collect their data, within the Article 14(3) period where you obtained it from someone else, and in answering their access request, under the incorporated GDPR Articles 13(2)(f), 14(2)(g) and 15(1)(h).
Norwegian Artificial Intelligence Act (KI-loven)proposed2 lines
Proposed Act on Artificial Intelligence (KI-loven), not yet enacted; Stortinget EU/EØS-nytt briefing of ; Ministry of Digitalisation and Public Governance press releases of 4 August and · Read the law's page
- Comply with Regulation (EU) 2024/1689's requirements for high-risk AI systems, including conformity assessment and human oversight.
- Disclose to a user that they are interacting with a chatbot and label AI-generated synthetic content, mirroring the EU AI Act's transparency duties.