Privacy law and GDPR
The EU’s General Data Protection Regulation (also known as the GDPR) has been transposed into Norwegian law through the Personal Data Act.
The regulations impose a number of obligations on organisations in relation to the processing of personal data, whilst also granting individuals a range of rights. The requirements set out in the Regulation and subsequent guidance from various supervisory authorities across the EU are extensive.
We can help you find effective solutions that strike a balance between comprehensive requirements and how these requirements can be implemented in your day-to-day operations. Our experienced lawyers can provide sound and practical advice on the processing of personal data in accordance with current regulations and assist you with other data protection matters.
Among other things, we can help with:
Review of the organisation’s processing of personal data to ensure that such processing complies with applicable data protection requirements
- Mapping of treatment activities and preparation of a treatment overview
- Development of data protection procedures, including procedures for the processing, storage and access to personal data
- Drafting of privacy policies and data processing agreements
- Review and assessment of agreements relating to cloud storage and the processing of personal data in third countries outside the EEA
- Assistance with complaints regarding the processing of personal data and the resolution of disputes
- Ongoing advice on data protection in the workplace, such as access to emails
- Due diligence and assessment of data protection issues in connection with transactions
- Advice on direct marketing and the use of cookies
