NorwayNorwegian Artificial Intelligence Act (KI-loven)
Proposed Act on Artificial Intelligence (KI-loven) not yet enacted; Stortinget EU/EØS-nytt briefing of ; Ministry of Digitalisation and Public Governance press releases of 4 August and
An AI risk obligations rule binding public and private bodies.
- How the hook was established
- express
- What makes it apply
- Market targeting, Operator establishment, Place of effect
- Audit expectation
- on_request
What it requires
- Comply with Regulation (EU) 2024/1689's requirements for high-risk AI systems, including conformity assessment and human oversight.NIST AI RMFGOVERN 1.1
- Disclose to a user that they are interacting with a chatbot and label AI-generated synthetic content, mirroring the EU AI Act's transparency duties.NIST AI RMFMEASURE 2.8
These lines are LexLint's reading of the law's text.
In the frameworks
- NIST AI RMF
- GOVERN 1.1Legal and regulatory requirements involving AI are understood, managed, and documented.
- MEASURE 2.8Risks associated with transparency and accountability – as identified in the MAP function – are examined and documented.
Our reading of where this law's duties sit in each framework, and in the NIST AI RMF, line by line beside each duty above. It never says that running a control meets the law. How we read a framework against the law
What it makes you log
Who may demand the log
Regulator
What the log must hold
Event time, Input reference, Human involvement
Log retention
Six months is a floor, not a fixed term: Article 19(1) of the Regulation calls for a period appropriate to the intended purpose of the high-risk system, of at least six months, unless other Union or national law, in particular data-protection law, provides otherwise.
- Unit
- Months
- As of
- Basis
- Purpose bound
- Minimum value
- 6
Logging duty
The draft Act adds no logging provision of its own. Its section 1 provides that the AI Regulation applies as Norwegian law, with the adaptations the EEA Agreement requires, so the Regulation's logging rules are the Act's: Article 12(1) requires a high-risk AI system to technically allow automatic recording of events (logs) over its lifetime. Draft section 8 only empowers the ministry to make regulations on handing over the Article 18 documentation when a business ends, and creates no duty itself. Retention follows Article 19(1) and access follows Article 21(2).
- Kind
- Explicit
- As of
- Provision
- Draft section 1, applying Regulation (EU) 2024/1689 as Norwegian law, with Article 12(1)
- Trigger
- high_risk_systems
Why the legislator wanted it
Recital 71 of the Regulation, first sentence (unofficial Norwegian translation). English: Having comprehensible information on how high-risk AI systems have been developed and how they perform throughout their lifetime is essential to make them traceable and to verify compliance with the requirements of the Regulation.
- As of
- Quote
- Å ha forståelig informasjon om hvordan KI-systemer med høy risiko er blitt utviklet og hvordan de yter gjennom hele sin levetid, er avgjørende for å gjøre disse systemene sporbare, for å verifisere at kravene i denne forordningen
- Source link
- https://www.regjeringen.no/contentassets/e823dc21809c43f2b4ba9ff1e389e245/ki-forordningen-eu-2024.1689-uoffisiell-norsk-131037.pdf
- Source kind
- Recital
- Purpose
- accountability_demonstration
What this law does
In its press release the Ministry of Digitalisation and Public Governance said it was preparing a legislative proposition to the Storting for a Norwegian Act implementing Regulation (EU) 2024/1689 (the EU AI Act). As of , the ministry stated that the high-risk rules will apply in Norway only once the Norwegian AI Act is adopted by the Storting.
It also stated that Norwegian rules are intended to take effect as soon as possible after Regulation (EU) 2024/1689, with the amendments agreed under the EU's Digital Omnibus package, is incorporated into the EEA Agreement. On the ministry announced that the Norwegian AI Act would be sent out for a new consultation in autumn 2026. The minister's stated ambition on that date was to put the AI Act before the Storting in spring 2027.
On the ministry put the EU's 2026 amendments to Regulation (EU) 2024/1689 out for consultation as an addition to the 2025 consultation, with responses due by . The ministry stated on that it was working on the legislative proposition implementing the Regulation in Norwegian law.
When LexLint raises it
When your app profile says your app deploys a chatbot, generates content with AI, makes high-risk automated decisions or processes biometric data.
Back to the example · Lint your app
Page updated .