pc
nid 93447
Jun 24, 2026
adavies@vixio.com
Norway
Lovdata
horizon scanning
32% of draft length
draft in Generated
Generated
2034 charsNorway's Ministry of Justice and Public Safety Implements Cybersecurity Certification Regulation
On June 23, 2026, Norway's Ministry of Justice and Public Safety (Justis- og beredskapsdepartementet) implemented a regulation on cybersecurity certification that incorporates European Union Regulation 2019/881 into Norwegian law. The regulation establishes the framework for cybersecurity certification of information and communication technology (ICT) products, services, and processes in Norway.
The regulation designates the National Security Authority (Nasjonal sikkerhetsmyndighet) as Norway's national cybersecurity certification authority and permits the King to appoint additional cybersecurity certification authorities for specific certification schemes. The National Security Authority and any appointed authorities hold responsibility for implementing measures outlined in the EU regulation, including designating and supervising conformity assessment bodies. The regulation exempts activities falling under public security, defence, national security, and state criminal law enforcement from its scope.
Key provisions establish that Norway's national accreditation body shall accredit conformity assessment bodies; cybersecurity certification authorities may issue corrective orders to producers and suppliers of certified ICT products, services, or processes that fail to meet requirements; and information must be exchanged between certification authorities, conformity assessment bodies, and the national accreditation body regarding identified non-compliance and issued certificates. The regulation permits certification authorities to impose administrative fines of up to one percent of annual turnover for providing false or incomplete information or obstructing inspections, and up to three percent of annual turnover for failing to comply with corrective orders, failing to report vulnerabilities, or issuing false EU declarations of conformity. The regulation came into force immediately on June 23, 2026, and repealed sections 2-11 of the previous electronic communications regulation from December 20, 2024.
Agent draft
Not run yet.
Published
650 charsNorwegian Government Implements Cybersecurity Regulation
On June 23, 2026, the Norwegian government published the Cybersecurity Certification Regulation.
The regulation implements Regulation (EU) 2019/881 (Cybersecurity Act – CA) in Norway. Specifically, the regulation establishes the framework for cybersecurity certification of information and communication technology (ICT) products, services, and processes in Norway. The regulation designates the National Security Authority as Norway's national cybersecurity certification authority and permits the King to appoint additional cybersecurity certification authorities for specific certification schemes.
The regulation enters into force immediately.