Datatilsynet

Name

Datatilsynet

Legal name

Datatilsynet

Website

https://datatilsynet.no

Company type

Private

Founded year

1980

Operating status

Operating

Headcount range

51–100 employees

Ownership category

akta.pro rank

Product category

Data Protection Regulation

NAICS

Regulation, Licensing, and Inspection of Miscellaneous Commercial Sectors (92615)

akta.pro primary industry

Data Governance Platforms (Policies, Stewardship, Workflows) (HDAEADAB)

akta.pro secondary industry

Consent, Preference & Data Rights Management (incl. HIPAA/GDPR support) (HLACAIAG)

Keywords

• Data protection regulation
• Privacy enforcement authority
• GDPR supervisory authority
• Regulatory sandbox artificial intelligence
• Data protection officer registration

Headquarters

HQ city

Oslo

HQ country

Norway

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B and B2C

Offering type

Services

Cost components

Personnel, Operations, Infrastructure, Technology or R&D, Marketing or Sales, Others

Revenue model

1. Government Funding: Datatilsynet is a Norwegian government regulatory authority funded through the national budget. It does not generate commercial revenue. Its services are free for the public.

Go-to-market motion2 records

Distribution channels3 records

Marketing channels8 records

Core offering

Datatilsynet is Norway's independent data protection authority that supervises, guides, and enforces compliance with GDPR and the Norwegian Personal Data Act. It serves Norwegian citizens and businesses through a guidance service, formal complaint handling, supervision (tilsyn), registration of data protection officers, and a regulatory sandbox for AI. All services are provided free of charge and funded through the national budget.

Product overview

Datatilsynet (Norwegian Data Protection Authority) is a governmental regulatory body, not a commercial product company. Its 'products and services' consist of regulatory, guidance, and informational offerings including: guidance services for the public and businesses, digital complaint and tip submission forms, a privacy blog, an educational platform for children and youth (Du bestemmer), a delete-me guidance service (slettmeg.no), an AI regulatory sandbox for innovation oversight, a public registry of data protection officers, a privacy podcast, email newsletters, and annual reports. These are regulatory services provided by a public authority, not commercial software products with integrations or APIs.

Differentiator

Problem solved

Functional benefit

Brands

• Personvernpodden: A podcast by Datatilsynet covering privacy questions and topics
• dubestemmer.no

Products and services

• Veiledningstjenesten (Guidance Service) A guidance service that answers questions from public and private entities and individuals on privacy and data protection matters, providing advice of a consultative nature via phone and email.
• Klageskjema (Complaint Form) Digital complaint form for filing complaints about perceived breaches of privacy regulations, accessible via ID-porten authentication, with cases processed at an average rate of ~1 year.
• Tipsskjema (Tip Form) Anonymous tip form for reporting possible breaches of privacy regulations by businesses, with submissions stored in a dedicated tips database for three years.
• Regulatorisk sandkasse for kunstig intelligens (AI Regulatory Sandbox) Regulatory sandbox helping individual actors and organizations develop AI solutions with good data protection, operational since 2021, with a broader focus on innovation and digitalization both with and without AI.
• Oversikt over registrerte personvernombud (Registry of Data Protection Officers) Searchable public registry of businesses that have appointed data protection officers, with contact details published on datatilsynet.no and updated daily. Registration is handled via Altinn integration.
• Årsrapport (Annual Report) Annual report covering Datatilsynet's activities, key cases, and trends in data protection, published for the Ministry and Parliament; the 2025 annual report is publicly available.
• Nyhetsbrev (Newsletter) Email newsletter providing current information about Datatilsynet's work and privacy-related content, with addresses managed by Make AS.

Quantifiable outcome

• Complaints doubled from 902 (2024) to 1848 (2025), with AI-generated complaints rising from 2% (May 2024) to 34% (December 2025)

Named customers1 record

Segments3 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Partnerships

Four partnerships are on record, tiered core and minor.

• Utdanningsdirektoratet (Directorate for Education and Training)coreStrategic or Co-development PartnerDatatilsynet collaborates with Utdanningsdirektoratet on the dubestemmer.no educational platform, which teaches children and youth (ages 10-18) about privacy, internet safety, digital judgment, and source criticism. The platform provides teaching materials for primary/secondary school and resources for parents.
• Foreningen Personvernombudene (Association of Data Protection Officers)coreStrategic or Co-development PartnerDatatilsynet has close cooperation with the Association of Data Protection Officers (Foreningen Personvernombudene), which holds monthly member meetings and is open to all registered data protection officers. Datatilsynet frequently contributes speakers to the association's meetings.
• NorSIS (Norsk Senter for Informationssikkerhet / Norwegian Centre for Information Security)minorStrategic or Co-development PartnerNorSIS drives the slettmeg.no website, which Datatilsynet hosts as one of its related websites. slettmeg.no provides free advice and guidance for removing personal information from the internet and understanding digital rights.
• European Data Protection Board (EDPB) and other EØS supervisory authoritiescoreStrategic or Co-development PartnerDatatilsynet cooperates with all EØS data protection authorities through the EDPB on cross-border privacy cases, using the IMI (Internal Market Information System) for information sharing. This cooperation is mandated under GDPR Articles 60-66 and the IMI Regulation.

Scale indicators4 records

Recent moves6 records

Expansion highlights4 records

Direct peers

• Österreichische Datenschutzbehörde (Austrian DPA): Austria's data protection authority with the same EØS/GDPR-based mandate as Datatilsynet. Smaller national regulator with comparable service scope.
• CNIL (Commission Nationale de l'Informatique et des Libertés): France's data protection authority, with identical GDPR enforcement, complaint handling, and guidance responsibilities. Among the most active national DPAs in Europe on enforcement and publishes extensive guidance on AI/sandbox topics similar to Datatilsynet.
• Garante per la protezione dei dati personali: Italy's data protection authority with the same statutory GDPR mandate, complaint handling, and EDPB participation as Datatilsynet. Direct functional counterpart within the EØS supervisory network.
• Information Commissioner's Office (ICO): The UK's data protection authority, with the same statutory mandate to supervise GDPR compliance, handle complaints, conduct investigations, and run regulatory guidance services. Highly comparable in scope, mandate, and service mix.
• Autoriteit Persoonsgegevens (AP): The Netherlands' data protection authority with the same statutory mandate, EDPB membership, and cross-border enforcement role. Operates a comparable guidance/complaint model.
• Agencia Española de Protección de Datos (AEPD): Spain's national data protection authority with equivalent GDPR enforcement, complaint, and guidance functions. Active in cross-border EDPB cooperation alongside Datatilsynet.
• Datenschutzbehörde (FDPIC, Switzerland): Switzerland's Federal Data Protection and Information Commissioner. Closely comparable mandate on data protection supervision and guidance, though operating under Swiss law rather than GDPR directly.
• Data Protection Commission (DPC, Ireland): Ireland's data protection authority, frequently the lead supervisor for many multinational tech companies under GDPR's one-stop-shop mechanism. Closely comparable supervisory and complaint-handling mandate.
• BfDI (Federal Commissioner for Data Protection and Freedom of Information, Germany): Germany's federal data protection commissioner with parallel statutory functions: GDPR enforcement, complaint handling, guidance, and EDPB representation. Highly comparable in role and scope.

Broad incumbents

• European Data Protection Board (EDPB): The EU's umbrella body that coordinates national DPAs (including Datatilsynet) and issues binding decisions on cross-border matters. Directly comparable function at the supranational level and the principal coordination partner for Datatilsynet's international work.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat3 records

Key risks5 records

Key highlights7 records

Customer concentration

• LinkedInlinkedin.com/company/datatilsynet

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Datatilsynet