Can I see what data a company holds about me in Norway?
Yes — you have the right to see what personal data an employer or company holds about you. Under GDPR Article 15, which applies in Norway through the Personal Data Act, the controller must respond without undue delay and within one month at the latest (extendable by two months for complex cases). Access is normally free, and you can get a copy of the data plus information on purpose, recipients and storage period. You can also demand correction and deletion — but here people get it wrong: the right to erasure is not absolute, and legal retention duties for accounting and tax can mean the data stays put whatever you demand. If the right is breached, you can complain free to the Data Protection Authority.
📋 The rules
- Right of access under GDPR Article 15
- Response without undue delay, within 1 month at the latest
- Access is normally free
- You can get a copy with purpose, recipients and storage period
- You can demand correction and deletion
🔓 Exceptions
- Data about other people can be kept out of the access
- Legal retention (accounting, tax) can prevent deletion
- Source-protected whistleblowing material can be exempt
⚠️ Penalties & fines
This is a right, not a prohibition, so it is the party holding the data that carries the risk. You can complain free to the Data Protection Authority, and serious GDPR breaches can bring fines of up to 20 million euros or 4% of global annual turnover — figures set to bite companies, not private individuals. What it costs you is time: the one-month deadline can be extended by two months in complex cases, and for a request that is manifestly unfounded or endlessly repeated the company can charge a reasonable fee. A concrete, well-defined access request is therefore both faster and free.
📎 Official sources
- Data Protection Authority · Right of access →
- Data Protection Authority · Q&A →
- Personal Data Act · Lovdata →
❓ Frequently asked
Can I see what my employer has stored about me?
Yes. You have a right of access to the personal data your employer holds about you, and you can get a copy with purpose, recipients and storage period. Data about other people can still be kept out of what you see.
How quickly must they respond?
Without undue delay and within one month at the latest. The deadline can be extended by two months for complex cases, but the extension is an exception — the controller cannot simply let your request sit.
Does it cost anything to request access?
No, access is normally free. A reasonable fee can only be charged for manifestly unfounded or repeated requests, so an ordinary, concrete access request should cost you nothing at all.
Can I demand that data be deleted?
Yes, you have a right to erasure, but the right is not absolute. Legal retention duties for accounting and tax can prevent deletion, and then the data must stay for as long as the retention duty runs.
Where do I complain if they refuse?
You can complain free to the Data Protection Authority, which supervises the privacy rules. Serious breaches can bring fines of up to 20 million euros or 4% of global annual turnover, so a complaint carries weight.
🔎 Common searches
What people search to land here:
- “can I access my own data norway”
- “gdpr access employer”
- “response within one month”
- “right to erasure norway”
- “data protection authority complaint”
- “personal data copy”