The King may prescribe regulations regarding the processing of personal data in
special activities or sectors. As regards the processing of personal data in connection
with credit information services, provisions may be laid down in regulations regarding
inter alia the type of data that may be processed, the sources from which personal data
may be obtained, the persons to whom credit information may be disclosed and how
such disclosure may be effected, the erasure of negative credit information and the
obligation of professional secrecy of the employees of the credit information agency.
Rules may also be prescribed to the effect that the Act or individual provisions laid
down in or pursuant to the Act shall apply to the processing of credit information
relating to persons other than natural persons.
Section 4
Territorial extent of the Act
This Act shall apply to controllers who are established in Norway. The King
may by regulations decide that the Act shall wholly or partly apply to Svalbard and Jan
Mayen, and lay down special rules regarding the processing of personal data for these
areas.
This Act shall also apply to controllers who are established in states outside the
territory of the EEA if the controller makes use of equipment in Norway. However, this
shall not apply if such equipment is used only to transfer personal data through Norway.
Controllers such as are mentioned in the second paragraph shall have a
representative who is established in Norway. The provisions that apply to the controller
shall also apply to the representative.
Section 5 Relationship to other Acts
The provisions of this Act shall apply to the processing of personal data unless
otherwise provided by a special statute which regulates the method of processing.
Section 6 Relationship to the statutory right of access to information pursuant to other
statutes
This Act shall not limit the right of access to information pursuant to the
Freedom of Information Act, the Public Administration Act or any other statutory right
of access to personal data.
If another statutory right of access provides broader access to information than
this Act, the controller shall on his own initiative provide information concerning the
right to request such access.
Section 7 Relationship to freedom of expression
The processing of personal data exclusively for artistic, literary or journalistic,
including opinion-forming, purposes shall only be governed by the provisions of
sections 13-15, 26, 36-41, cf. Chapter VIII.
Chapter II General rules for the processing of personal data
Section 8 Conditions for the processing of personal data
Personal data (cf. section 2, no. 1) may only be processed if the data subject has
consented thereto, or there is statutory authority for such processing, or the processing is
necessary in order
a)
to fulfil a contract to which the data subject is party, or to take steps at the
request of the data subject prior to entering into such a contract,