Regulatory map for AI, translation and interpretation

Public and private enterprises that use, translate, adapt, publish, or analyze protected content. Developers and providers of AI and language tools, as well as rights holders and content producers, are also affected.

State, county municipal and municipal clients, bodies governed by public law and other clients covered by the regulations. Public sector suppliers are affected through tender documentation, qualification requirements, contract terms and contract follow-up.

Public and private employers that use AI or digital systems to plan, manage, allocate, monitor, or evaluate work. Employees and union representatives who are affected by the systems are covered by requirements for information, training, participation, and consultation.

Public bodies that create or receive documentation as part of their operations. Private suppliers may be affected when they perform statutory tasks on behalf of public bodies.

Businesses that develop, procure, or use AI involving personal data, including management, product owners, developers, purchasers, legal professionals, data protection officers, security teams, communication staff, and suppliers.

Public sector entities on the CIPS agreements' customer list, especially managers, procurement officers, IT managers, architects, legal advisors, security officers, and data protection officers

Specified providers of essential services in energy, transport, health, water supply, banking, financial market infrastructure, and digital infrastructure, as well as providers of online marketplaces, cloud computing services, and online search engines. Suppliers may also be affected through agreed security requirements.

Courts, parties, witnesses and experts who need an interpreter, as well as court interpreters, translators, legal counsel and providers of interpreting and translation services.

Financial entities covered by DORA Article 2 include banks, payment and electronic money institutions, investment firms, fund managers, insurance and reinsurance undertakings, pension institutions, financial market infrastructures, crypto-asset service providers, and crowdfunding service providers. Certain types of entities are expressly exempt. ICT providers are primarily affected through contracts, while designated critical providers may be subject to direct oversight.

State, municipal, and county administrative bodies that offer electronic communication, digital services, or electronic case processing. Suppliers that process information or operate solutions on behalf of an agency are affected through the entity's requirements, agreements, and instructions.

Private and public companies, employees, suppliers, advisors, and partners who create, receive, share, or process confidential business information. Particularly relevant when using external AI and language tools, supplier collaboration, and public procurement.

Public and private entities that offer ICT solutions aimed at or made available to the general public, as well as suppliers that develop or operate such solutions. The public sector has specific requirements for websites and mobile applications.

National and municipal administrative bodies, employees and contractors who perform case processing, and suppliers of AI, language and professional systems that are part of the administration's work processes. Private legal entities are also covered when they make individual decisions or issue regulations.

State, county municipal and municipal administrative bodies, as well as other legal entities when they make individual decisions or issue regulations. Suppliers who develop or operate automated case-processing systems for the public sector are affected through the client's requirements.

Healthcare personnel, other personnel who process health data, and public and private entities that provide health and care services.

Public bodies, private entities performing public tasks, private kindergartens and schools covered by the act, employees who order or use interpreters, interpreters, and providers of interpreting services.

Municipalities that make decisions on and provide introduction programs and training in Norwegian and social studies. County municipalities are affected for specific participants in upper secondary education. Training providers are affected when they perform tasks on behalf of the public sector.

Leaders, product owners, project managers, procurers, legal professionals, privacy and security teams, developers, communication officers, and case handlers in state and municipal organizations that develop, procure, or use AI.

Leaders, decision-makers, digitalization and IT managers, functional and line managers, project managers, union representatives, and employee representatives in public and private enterprises who are evaluating or using AI assistants.

Providers, deployers, importers, distributors, and product manufacturers in the AI value chain. Norwegian public and private enterprises may also be covered when they offer or use AI in the EU, or when the output from an AI system is used in the EU.

Public and private organizations that develop, offer, import, distribute, or use AI systems in Norway. Suppliers to the public sector and organizations operating both in Norway and the EU/EEA are particularly affected by the implementation process.

Public agencies and suppliers that design texts, services, or communications for the public sector

Municipalities and county municipalities. The municipal director has statutory responsibility, while business managers, service areas, and support and control functions contribute to the practical implementation.

Public and private enterprises that use AI or language solutions in services, communication, recruitment, employment relationships, or decision-making processes. Vendors may also be affected when their solutions are part of such processes.

Traders who market goods or services to consumers, as well as agencies, platforms, and suppliers who design, translate, personalize, or distribute marketing on their behalf. Public entities are affected when they act as traders.

State bodies, municipalities, county municipalities, and other legal entities covered by Section 2 of the Freedom of Information Act. Suppliers that store or manage documents on behalf of such bodies can also affect the body's ability to process requests for access.

Municipalities, county municipalities, public schools, training offices, and private primary and lower secondary schools covered by the Education Act.

Public and private health and care services and personnel who provide information to patients, users, or close relatives.

Public and private health and care services, healthcare personnel, and entities that manage or use patient record and information systems.

All public and private enterprises that process personal data, including through AI systems, translation tools, transcription, speech recognition, chatbots, and other language technology services. Vendors and data processors are also affected through requirements for agreements, security, and documentation.

State, county-municipal and municipal bodies covered by the language rules of the Sámi Act. Providers of language, interpretation, AI and digital services may be affected through contract requirements and by supporting the body's fulfillment of its obligations.

State, county-municipal and municipal bodies, private enterprises covered by decisions pursuant to the Security Act, and suppliers or subcontractors to the extent that the rules on security-cleared procurements apply.

State, county-municipal, and municipal bodies. Suppliers who design text, digital services, or communication on behalf of the public sector are indirectly affected through the commissioning body's responsibility for language.

Businesses that offer covered products or services to consumers in the EU, including manufacturers, importers, distributors, banks, e-commerce businesses, and providers of digital public services. Norwegian businesses can be covered when operating in EU markets.

Public agencies that encounter individuals who cannot communicate adequately without an interpreter. Suppliers, interpreter dispatch agencies, and interpreters who carry out assignments for the public sector are also affected by requirements regarding qualifications, security, privacy, and professional practice.

The immigration authorities, especially the police, the Norwegian Directorate of Immigration (UDI) and the Immigration Appeals Board (UNE), individuals in specific immigration and protection cases, as well as interpreters and contractors performing assignments for the immigration administration.