← Back to the regulatory map
Proposal for a Norwegian law Norway and the EU

The AI Act

Under Norwegian/EEA implementation

Last peer reviewed September 4, 2026

Brief overview

The AI Act is the planned Norwegian law for the implementation of the EU AI Regulation into Norwegian law.

The Ministry of Digitalization and Public Administration sent a draft bill out for public consultation on June 30, 2025. The proposal is based on the incorporation of Regulation (EU) 2024/1689 into Norwegian law. The consultation covered, among other things, the geographical scope of the act, the organization of Norwegian authorities, sanctions, appeal mechanisms, and certain national adaptations.

On August 4, 2026, the government announced a new consultation on the AI Act in the autumn of 2026, following changes to the EU AI Regulation. The ambition is to submit the legislative proposal to the Storting in the spring of 2027.

The Norwegian date of entry into force has not been set. Implementation also depends on EEA incorporation and necessary adjustments. The previously stated goal of entry into force in late summer 2026 is not to be treated as a current deadline.

Nkom has been designated as the coordinating market surveillance authority and national contact point for the AI Act. Other sectoral authorities may be given responsibilities within their areas. The complete distribution of supervisory tasks has not yet been finally clarified.

This profile follows the Norwegian implementation process. The substantive requirements, risk categories, and application dates in the EU are addressed in the separate profile «AI Act and Digital Omnibus».

Norwegian businesses should monitor developments and prepare governance, oversight, and documentation, but should not present the AI Act as applicable Norwegian law until the Storting has passed the law and its entry into force has been determined.

What regulates this

The bill will implement the EU AI Act into Norwegian law and establish the national frameworks for regulatory authority, supervision, enforcement, sanctions, appeals, and entry into force.

The proposal is based on incorporating the AI Act into Norwegian law. The substantive obligations will essentially stem from the regulation, while the AI Act will regulate how the rules function in Norway.

The final law must be viewed in conjunction with the EEA incorporation of the AI Act and the amendments resulting from the Digital Omnibus.

Who is affected

Public sector supplier

Public sector

Private sector

Why it has practical significance

The AI Act will determine when and how the requirements of the Artificial Intelligence Act take legal effect in Norway, which authorities businesses must relate to, and how violations can be enforced and sanctioned.

Businesses therefore need to distinguish between rules that already apply in the EU, future Norwegian obligations, and measures being implemented now as preparation.

Supplier agreements, AI overviews, division of roles, risk classification, and documentation routines should be designed so that they can be adapted once the Norwegian law and supervisory structure are finally adopted.

Key Requirements and Obligations

  • According to the proposal, the AI Act is to be implemented into Norwegian law by incorporation.
  • Norwegian authorities must be designated for market surveillance, notification, and other enforcement.
  • Nkom has been designated as the coordinating market surveillance authority and national contact point.
  • Other sectoral authorities may be assigned supervisory responsibilities within their established areas of responsibility.
  • The Norwegian law shall contain national rules regarding, among other things, sanctions, coercive fines, appeals, and authority competence.
  • The material obligations of the businesses will depend on their role and the risk category to which the AI system belongs.
  • Norwegian entry into force requires the necessary EEA and legislative processes.
  • The final requirements must be checked against the adopted law, regulations and the incorporated version of the AI Act.

What the business may consider documenting

  • Follow the government bill, the Storting's deliberations, the EEA incorporation, and subsequent decisions on entry into force.
  • Create an updated overview of AI systems being developed, procured, or used.
  • Determine whether the business acts as a provider, commissioning party, importer, distributor, or in multiple roles.
  • Identify which systems may be subject to bans, transparency requirements, or high-risk rules.
  • Assign responsibility for following the Norwegian implementation process to a named role.
  • Clearly distinguish between current EU dates and future Norwegian entry-into-force dates in internal and external communication.
  • Maintain requirements in supplier contracts regarding documentation, information on system changes, risk classification, and assistance during audits.
  • Connect this profile to the «AI Act and Digital Omnibus» for the substantive requirements and EU dates.
  • Update internal procedures when the bill, the EEA decision, or a Norwegian entry-into-force date is published.

See also the regulatory map

Sources and Further Reading

The links point to external sources. Check the current text and status before using them in your own work.

The information is general information and not legal advice. The applicable requirements must be assessed based on the enterprise's sector, role, information, and specific use of technology.