Personvernnemnda (Norway)

From GDPRhub
Personvernnemnda
LogoNO Personvernnemnda.png
Name: Personvernnemnda
Abbreviation : Personvernnemnda
Jurisdiction: Norway
Head: Mari Bø Haugstad
Deputy: Bjørnar Borvik
Adress: PO Box 6805

St. Olavs plass

0130 OSLO

NORWAY

Webpage: personvernnemnda.no
Email: post@pvn.no
Phone: +47 90 29 92 16
Twitter:
Procedural Law: Personal data Act (Personopplysningsloven) (in NOR), Public Administration Act (Forvaltningsloven) (in EN), Freedom of Information Act (Offentleglova) (in EN)
Decision Database: Important decisions (in NO)
Translated Decisions: Category:Personvernnemnda (Norway)
Head Count:
Budget: NOK 2,683,000 (€256,980) (2020)

The Norwegian Privacy Appeals Board (Personvernnemnda) processes and decides on appeals against decisions of the Norwegian Data Protection Authority (Datatilsynet). Parties have to appeal a decision directly with the DPA. If the DPA upholds its decision, the appeal is submitted to Personvernnemnda, who has the authority to overturn decisions issued by Datatilsynet. Personvernnemnda's decisions are final under the administrative procedure, but can be appealed to the courts.

Structure[edit | edit source]

Personvernnemnda is an independent administrative body subordinated to the Norwegian Ministry of Local Government and Modernisation. Personvernnemnda is a collegial body, consisting of seven members. It has a quorum of five members. The members and deputies are appointed for four years with a right to be reappointed for another four years.

Applicable Material Law in Norway[edit | edit source]

When the General Data Protection Regulation (GDPR) 2016/679 was enacted, it was transposed into national law through the Personal Data Act. The Personal Data Act is divided into nine chapters with 34 paragraphs, followed by the GDPR full text.

Procedural Information[edit | edit source]

Applicable Procedural Law[edit | edit source]

When the General Data Protection Regulation (GDPR) 2016/679 was enacted, it was transposed into national law through the Norwegian Personal Data Act (personopplysningsloven). The Personal Data Act is divided into nine chapters with 34 paragraphs, followed by the GDPR full text. Personvernnemnda is introduced by § 22 of the Personal Data Act.

Complaints[edit | edit source]

After Datatilsynet made a decision on a case, this decision can be appealed within three weeks after receipt of the decision. The appeal has to be submitted to Datatilsynet (Postboks 458 Sentrum, 0105 Oslo, Norway). The DPA will reconsider the case. If it upholds its decision it forwards the case, all relevant documents and a transmission letter to Personvernnemnda. A copy of the latter is sent to the parties.

Upon receipt of the complaint, Personvernnemnda's secretariat notifies the parties and sets a deadline for them to comment, in particular on the transmittal letter.

Afterwards Personvernnemenda, which meets on average once a month, processes the case in writing. The parties cannot participate in this procedure. The parties receive the final decision - usually within two weeks after the meeting.

Appeals[edit | edit source]

Personvernnemnda's decisions are final under the administrative procedure. However, they can be appealed to the courts.

Practical Information[edit | edit source]

Filing a complaint[edit | edit source]

Known problems[edit | edit source]

No known problems.

Filing an appeal[edit | edit source]

Statistics[edit | edit source]

Funding[edit | edit source]

Personvernnemnda is financed within the state budget. It had a budget of NOK 2,683,000 (approx. €256,980) in 2020.

Personal[edit | edit source]

Caseload[edit | edit source]

Personvernnemnda published the following statistics for 2020's caseload in its annual report:

  • Incoming cases: 24
  • Decided cases (substantiated): 17
  • Datatilsynet's decisions upheld: 8
  • Datatilsynet's decisions amended or repealed: 8
  • Ratio of decisions changed: 47%
  • Case processing time on average (in months): 2,3

Annual Reports[edit | edit source]

Personvernnemnda's annual reports from 2012 are available on this page.

References[edit | edit source]


EU/EEA/UK Data Protection Authorities
Austria · Belgium · Bulgaria · Croatia · Cyprus · Czech Republic · Denmark · Estonia · Finland · France · Germany (Baden-Württemberg · Bavaria, private sector · Bavaria, public sector · Berlin · Brandenburg · Bremen · Hamburg · Hesse · Lower Saxony · Mecklenburg-Vorpommern · North Rhine-Westphalia · Rhineland-Palatinate · Saarland · Saxony · Saxony-Anhalt · Schleswig-Holstein · Thuringia ) · Greece · Hungary · Ireland · Italy · Latvia · Lithuania · Luxembourg · Malta · Netherlands · Poland · Portugal · Romania · Slovakia · Slovenia · Spain (Basque Country · Catalonia · AndalusiaSweden
Iceland · Liechtenstein · Norway · United Kingdom EDPS · EDPB