You are here

Norway

Country:
Survey Answer:

The following laws and administrative measures contains provisions which envisage criminal sanctions for violations connected to the lack of adoption of cybersecurity measures:
A. The Security Act section 31 penalizes the lack of adoption of cybersecurity measures as described in Question 1.2, above ,with fines or imprisonment for a term not exceeding six months.
B. The Personal Data Act section 48 penalizes the lack of adoption of cybersecurity measures as described in Question 2.1, above, with fines or imprisonment for a term not exceeding one year.
C. The Electronic Communications Act section 12-4 penalizes the lack of adoption of cybersecurity measures as described in Question 3.1, above, with fines or imprisonment for a term not exceeding six months.
D. The Energy Act section 10-5 penalizes the lack of adoption of cybersecurity measures pursuant to the Emergency Regulation as described in Question 3.1, above, with fines or imprisonment for a term not exceeding one year.
E. The Petroleum Act section 10-17 penalizes the lack of adoption of cybersecurity measures as described in Question 3.1, above, with fines or imprisonment for a term not exceeding two years.
F. The Personal Health Data Filing System Act section 30 penalizes the lack of adoption of cybersecurity measures as described in Question 3.1, above, with fines or imprisonment for a term not exceeding one year.
G. Patient Journal Act section 30 penalizes the lack of adoption of cybersecurity measures as described in Question 3.1, above, with fines or imprisonment for a term not exceeding one year.
H. Financial Supervision Act penalizes the lack of adoption of cybersecurity measures described in Question 1.3B, above, with fines or imprisonment for a term not exceeding one year.
Penalty in the above mentioned provisions requires intentional or grossly negligent lack of adoption of cybersecurity measures prescribed in the applicable laws and / or administrative measures.

Provided By:
Haakon Opperud: Advokatfirmaet Thommessen AS