← Back to the regulatory map
Love Norway

The Working Environment Act

Valid in Norway

Last peer-reviewed July 16, 2026

Brief overview

As a general rule, the Working Environment Act applies to employers and employees in both the private and public sectors. The Act sets requirements for a fully satisfactory working environment, information, training, participation, and the use of control measures towards employees.

The law is relevant when AI systems and digital tools are used to plan, manage, allocate, monitor, or evaluate work. Examples may include automated task allocation, activity measurement, productivity analysis, performance ranking, log control, or AI-supported evaluation of employees.

Pursuant to Section 4-2, employees and their employee representatives shall be kept continuously informed about systems used in the planning and execution of work. They shall receive necessary training and participate in the design of the systems. In the event of significant changes in the work situation, the employer shall ensure necessary information, participation, and skills development.

The use of AI is not automatically a control measure. If the system is used to monitor, measure, classify, rank, or evaluate employees, the rules in Chapter 9 may apply. Control measures must have an objective basis in the company's circumstances and must not entail a disproportionate burden for the employee.

The need for, design of, and implementation of control measures shall be discussed with the employee representatives as early as possible. Before the measure is implemented, affected employees shall receive information about the purpose, the practical consequences, how the control will be carried out, and how long it is expected to last.

When the AI system processes personal data about employees, the Personal Data Act and the GDPR apply in parallel. The use may also affect the Equality and Anti-Discrimination Act and the AI Act's rules on AI systems in the workplace.

What regulates this

The Working Environment Act regulates the employer's responsibility for a fully satisfactory working environment and the employees' right to information, training, and participation.

Chapter 9 regulates control measures regarding employees. The rules may apply when AI systems are used to monitor, measure, classify, rank, or evaluate workers. Whether a system constitutes a control measure must be assessed based on its actual function and use, not merely the vendor's description of the tool.

Who is affected

Public sector

Private sector

Why it has practical significance

AI can turn routine work data, logs, and documents into a basis for comprehensive employee analysis. The results can affect work distribution, work pace, monitoring, performance evaluations, and personnel decisions.

The business must therefore clarify whether an AI system only supports the work process, or if it also functions as a control measure. Purpose, necessity, proportionality, data sources, access, human oversight, and consequences for the work environment should be assessed before the system is put into use.

A system may be covered by the rules even if the vendor does not market it as a monitoring or control tool. It is the specific use and impact on employees that is decisive.

Key Requirements and Obligations

  • Ensure that technology, work organization, and work processes do not expose employees to adverse physical or mental strain.
  • Keep employees and union representatives continuously informed about systems used in the planning and execution of the work.
  • Provide employees with the necessary training in the systems and facilitate participation in their design.
  • Ensure information, participation, and necessary competence development in the event of significant changes in the work situation.
  • Assess whether the use of AI or digital systems constitutes a control measure pursuant to Chapter 9.
  • Only implement control measures when the measure has an objective basis in the company's circumstances and does not entail a disproportionate burden for the employees.
  • Discuss the need for, design, implementation, and significant changes to control measures with the employee representatives as early as possible.
  • Inform affected employees before introducing a control measure about the purpose, practical consequences, implementation, and expected duration.
  • Regularly evaluate the need for control measures together with the employee representatives and terminate measures that are no longer necessary.
  • Process personal data about employees in accordance with the Personal Data Act and the GDPR.
  • In businesses with at least 50 employees: follow the rules in Chapter 8 on information and consultation in decisions that may lead to significant changes in work organization or employment relationships.

What the business may consider documenting

  • Map which AI systems and digital tools process information about employees or affect their work situation.
  • Classify each system as a work tool, decision support, control measure, or a combination of these.
  • Document the purpose, data sources, analyses, results, who has access, and how long the information is stored.
  • Conduct a working environment and privacy risk assessment before the system is put into use or undergoes significant changes.
  • Assess whether it is necessary to carry out a Data Protection Impact Assessment under the GDPR.
  • Involve shop stewards, safety representatives, the working environment committee, and the data protection officer where relevant.
  • Establish clear boundaries for which employee data can be processed in AI tools.
  • Inform employees in an understandable way about what the system does, what data it uses, and how the results can affect them.
  • Test the system for errors, biases, and discriminatory effects before the results are used in personnel management or decision-making.
  • Ensure genuine human oversight and an opportunity for employees to correct information or contest erroneous results.
  • Agree on requirements for access control, logging, storage, deletion, and reuse of data with the supplier.
  • Review control measures and analysis functions regularly and discontinue use that is no longer necessary or proportionate.

Sources and Further Reading

The links point to external sources. Check the current text and status before using them in your own work.

The information is general information and not legal advice. The applicable requirements must be assessed based on the enterprise's sector, role, information, and specific use of technology.