Information security

On 2 September 2026, the EU NIS Cooperation Group published responses following a survey on the roadmap for transitioning to post-quantum cryptography. The 97 submissions informed an FAQ covering risk, milestones, hybrid schemes, crypto-agility and the division between EU and national roles.

On 4 August 2026, the Norwegian government announced that its proposed AI Act would return to consultation after changes in the EU simplification package.

The EDPB published new guidelines on web scraping for generative AI and adopted final blockchain guidelines.

Norway’s National Security Authority (NSM) says organisations should address the quantum threat by 2030 with post-quantum cryptography that fits existing architectures. It advises against quantum key distribution (QKD), citing technical and fundamental limitations.

Norwegian authorities invited organisations to comment on draft EU guidelines for classifying high-risk systems.

The EDPB opened a consultation on guidelines for processing personal data in scientific research, including research using artificial intelligence.

Norway’s National Security Authority warned about a campaign in which attackers impersonated Signal Chat Support and sought users’ PIN codes.

A large group of privacy regulators issued a joint statement on AI systems capable of creating realistic and harmful images or videos of real people.

On 20 January 2026, the European Commission proposed revising the EU Cybersecurity Act with stronger supply-chain and certification measures.

The Norwegian Data Protection Authority notified Helseplattformen AS of possible orders after an inspection identified security shortcomings in the system.

The Ministry of Justice and Public Security proposed rules for police use of AI for retrospective remote biometric identification, such as searching recorded video against images in a register after an event.

Norway's Digital Security Act and regulations entered into force on 1 October 2025 without a transitional period.