Automated decisions (NO)
This is the binding constraint that actually bites on public-sector AI in Norway today, years ahead of the AI Act. Any algorithmic decision affecting an individual's rights must survive it.
What it is
Norwegian administrative law permits fully automated individual decisions only where authorised, and requires that the rules underlying such decisions be documented and made available. It sits alongside the Personal Data Act's implementation of GDPR Article 22.
Who is affected
This is the binding constraint that actually bites on public-sector AI in Norway today, years ahead of the AI Act. Any algorithmic decision affecting an individual's rights must survive it.
Key obligations
- Legal basis required before an individual decision is made fully automatically
- Documentation of the decision rules, available on request
- Right to human review under data-protection law
Recent signals
Norway prepares national AI Act transposition ahead of EEA incorporation
Norwegian ministries continued preparatory work on the national implementation act and authority designation while the AI Act awaits incorporation into the EEA Agreement, leaving Norwegian providers exposed to EU obligations before domestic ones.
Related instruments
- NOAI Act (Norway, EEA)Norway is not an EU member but is bound to the single market through the EEA Agreement. The AI Act must be incorporated into the A…
- NONorwegian AI sandboxA supervised environment in which selected organisations develop AI systems with direct guidance from the Norwegian Data Protectio…
- NONorway AI strategyNorway's AI policy is set out in a national AI strategy and the digitalisation strategy running to 2030, built on ethical principl…
- EUGDPR × AIThe EU's data-protection regime remains a primary AI constraint: legal bases for training data, automated-decision rights (Art. 22…
- USEO 14179Revoked the 2023 Biden AI executive order and reoriented federal AI policy toward removing regulatory barriers and securing US AI …
Related reading
- Issue 17Denmark met the deadline. Sweden is late. Norway is outside the regime.A model classified Critical for cyber capability shipped this month and no Nordic AI authority has issued operational guidance in response. What policymakers, businesses and citizens should do — and what the region is getting right.
- Issue 15Seven AI hubs is the right design. It deserves ten times the money.Pakistan’s National AI Advancement Initiative reaches under-served regions, uses non-dilutive grants, and selects its operator by open tender — better practice than most national AI programmes anywhere. The reported allocation is Rs 524.64 million.
- Issue 14Pakistan crossed from strategy to infrastructure in thirteen monthsA national AI policy, a sovereign data centre operating, compulsory AI in every degree programme, record technology exports, and Google’s first office. What is missing now is a coordination layer — a far cheaper problem than the one Pakistan has just solved.