Norway — GDPR (EEA) DSAR Deadline Calculator
Calculate your exact response deadline under General Data Protection Regulation (via EEA Agreement) + Personopplysningsloven (Personal Data Act) (GDPR / Personopplysningsloven).
Your deadline will appear here
Select a jurisdiction and request type to get started
GDPR / Personopplysningsloven Overview
Full Name
General Data Protection Regulation (via EEA Agreement) + Personopplysningsloven (Personal Data Act)
Effective Since
2018-07-20
Regulatory Authority
Datatilsynet (Norwegian Data Protection Authority)
Official Text
View law€20M or 4% of global annual turnover (GDPR fines apply)
Recent example: Grindr fined NOK 65M (approx. €5.7M) by Datatilsynet in 2021
Request Types & Deadlines
| Request Type | Deadline | Extension |
|---|---|---|
Right of Access Art. 15 GDPR — Right to obtain confirmation and access to personal data | 1 months | +2 months |
Right to Rectification Art. 16 GDPR — Right to have inaccurate personal data corrected | 1 months | +2 months |
Right to Erasure Art. 17 GDPR — Right to have personal data deleted ("right to be forgotten") | 1 months | +2 months |
Right to Restriction Art. 18 GDPR — Right to restrict the processing of personal data | 1 months | +2 months |
Right to Data Portability Art. 20 GDPR — Right to receive personal data in a portable format | 1 months | +2 months |
Right to Object Art. 21 GDPR — Right to object to processing of personal data | 1 months | +2 months |
Extension Rules
Extension period: 2 months
Conditions: Complex or voluminous requests
Notification required: Within the original 1-month deadline
Special Rules & Common Mistakes
- •GDPR applies directly in Norway through the EEA Agreement
- •Deadline is 1 calendar month from day after receipt — identical to EU GDPR
- •GDPR was incorporated into Norwegian law via Personopplysningsloven (effective July 20, 2018)
- •If deadline falls on a weekend or public holiday, it extends to the next business day
- •Datatilsynet is the independent supervisory authority
- •Manifestly unfounded or excessive requests may be refused or charged a reasonable fee
- •Norway has been one of the most active EEA countries in GDPR enforcement
Compare with Other Jurisdictions
| Law | Deadline | Method | Extension |
|---|---|---|---|
| 🇳🇴 Norway | 1 months | calendar months | +2 months |
| 🇪🇺 EU GDPR | 1 months | calendar months | +2 months |
| 🇬🇧 UK GDPR | 1 months | calendar months | +2 months |
| 🇺🇸 CCPA | 45 days | calendar days | +45 days |
Norway FAQ
Automate Norway DSAR tracking
PrivacyCache tracks deadlines, captures cryptographic evidence, and generates audit-ready Deal Packs for GDPR / Personopplysningsloven compliance.
Start with PrivacyCache