Norway AI Act
Norway AI Act (EU AI Act via EEA)
Norway implementing full EU AI Act through EEA Agreement. Most comprehensively regulated non-EU jurisdiction for AI. Also implementing Digital Services Act with some Norwegian additions.
Jurisdiction
Norway
Enacted
Pending
Effective
TBD
Enforcement
Norwegian Communications Authority (Nkom) as coordinating market surveillance authority
Full application expected late summer/August 2026
Norwegian GovernmentWhy It Matters
Non-EU country fully adopting EU AI Act framework. Demonstrates EEA pathway for comprehensive AI regulation adoption.
Recent Developments
AI Act consultation open June 30 – Sep 30, 2025. DSA implementation proposal published July 2, 2025. Digital Security Act entered force Oct 1, 2025.
At a Glance
Applies to
Harms addressed
Who Must Comply
- AI system providers and deployers in Norway/EEA
Safety Provisions
- Full EU AI Act obligations via EEA Agreement
- Prohibited AI practices, high-risk requirements mirror EU
- Digital Services Act implementation (police notification additions)
- Digital Security Act for critical infrastructure (effective Oct 2025)
Compliance & Enforcement
Penalties
€35M or 7% revenue (whichever higher)
View on map
Norway
Focus Areas
Cite This
APA
Norway. (n.d.). Norway AI Act (EU AI Act via EEA).
Related Regulations
Finland AI Act
Finland's EU AI Act implementation using decentralized supervision model. Traficom serves as single point of contact and coordination authority. Ten market surveillance authorities share enforcement across sectors. New Sanctions Board handles fines over EUR 100,000.
Hungary AI Act
Hungary's comprehensive AI law implementing the EU AI Act. Designates the National Media and Infocommunications Authority (NMHH) as the primary supervisory authority, with sectoral regulators for specific domains.
Denmark AI Act
First EU member state to fully implement the EU AI Act. Designates three competent authorities, establishes penalty framework aligned with EU maximums, and grants inspection/enforcement powers. Does not add material requirements beyond EU AI Act.
EU DSA Minors Guidelines
Commission guidelines under DSA Article 28(1) establishing measures for online platforms to protect minors, including age assurance, default privacy settings, anti-addictive design restrictions, recommender system safeguards, and protections against grooming and exploitation.
Norway AI-in-Schools Recommendations
Norwegian government national recommendations directing that generative AI should, as a general rule, not be used by pupils in primary school (grades 1-7), with gradual, teacher-supervised use permitted in lower secondary (grades 8-10) and appropriate-use education in upper secondary. Issued through the Directorate for Education and Training (Udir).
IL HB 5511
Requires covered operators of online platforms to apply protective default settings to users they know to be minors, including limits on algorithmic feeds, a 10 p.m. to 7 a.m. notification curfew and no autoplay by default on addictive social media platforms, and establishes a device-level age-bracket signal that Internet-enabled device manufacturers must provide and operators must request. Announced by the Governor as the Children's Social Media Safety Act, the title of the bill as introduced. Enforced by the Attorney General.
Last updated February 17, 2026. Verify against primary sources before relying on this information.