Policy / Setting conditions
Norway
Norway requires data centre operators to register and meet security and continuity duties, but does not require a licence.
Since January 2025 operators of commercial data centres, and of larger enterprise facilities, must register with the communications authority and meet security, preparedness and incident-reporting duties. Registration is informational and operators may start business once registered. The rules shape how a facility is run rather than whether it can be built.
The rules and programmes
| Instrument | Kind | Status | What it does |
|---|---|---|---|
| Data centre registration duty | Law | in force from 1 January 2025 | Applies to operators offering services to third parties for payment and to those above a stated power threshold; it is not an approval scheme. |
| Data centre regulation, security and incident reporting | Law | in force | The electronic communications act and the data centre regulation impose security, preparedness and notification duties from January 2025. |
Checked against the primary sources linked above on 2 October 2026. Due for review by 1 January 2027. This is a summary, not legal advice. If something is out of date, tell us.