These include the right to access your data, the right to have incorrect data corrected, the right to have data deleted, the right to restrict processing, the right to object, the right to data portability, the right to withdraw consent, and the right to appeal.

You can find more information about your rights, including your right to appeal, on the Norwegian Data Protection Authority’s website.

There are a few exceptions to these rights. For example, the right to information and access may be suspended when this is required in order to reveal violations of the rules and regulations we administer, and when the data are subject to secrecy under law. There are also exceptions from the right to correction, deletion or restriction of processing. These apply when the NPRA is required by law to store the personal data, e.g. pursuant to the Archives Act.

Special note on profiling and automated decisions

Some types of NPRA processing are fully automated. For example, this applies to a number of self-service facilities such as submitting a Notification of Sale and transferring the registration of a vehicle when it changes owner, as well as to road toll collection. You can always request to have an automated decision reexamined by a case officer. You can also contact the NPRA to present your views with regard to the decision, or to dispute the decision.