Fox Rothschild LLP (LexBlog Norway)

Datatilsynet Norway has issued a helpful guide on the data protection aspects of employee monitoring, which are helpful for GDPR, but also for California employers with CPRA bringing employee rights into play in 2023. In addition to this handy checklist, employers should also remember: Beware of data that is sensitive or deemed especially personal (personal...

Norway’s Datatilsynet does not mince words in its Brexit guidance: “On 31 December 2020, the Brexit transition period will end. This means, among other things, that anyone who transfers personal data to the United Kingdom after this date must follow the rules on the transfer of personal data to third countries.” “If the European Commission does...

When it comes to entering into new agreements with non-EU providers that involve the processing of EU personal data, if in doubt – don’t, says Norway DPA Datatilsynet. “One must be prepared for the fact that new agreements involving the illegal transfer of personal data to third countries may be considered more severely than existing...

Norway’s Datatilsynet issues detailed FAQ’s on #SchremsII: Notable takeaways: “[T]he additional measures…could potentially be…legal, technical or organizational measures. At present…there is great uncertainty about what kind of additional measures may be sufficient if the third country has laws that take precedence over…or otherwise lower the level of protection. This means that at present it is..

General: This is not the time for strict enforcement of data protection. We are showing agility during this crisis. Work: Information that someone is infected with coronavirus is health information. Information that someone has been quarantined or returned from a so-called “risk area” is not health information. Employers should not disclose information that individual employees...