Norway

Norway's digital-accessibility regime occupies an unusual position in the European map: the country is not an EU member state, but the EEA Agreement imports the substantive content of EU accessibility directives into Norwegian law on essentially the same timetable. Public-sector and large parts of the private-sector ICT have been on the hook since 2014, when the Regulation on universal design of ICT solutions (Forskrift om universell utforming av IKT-løsninger, FOR-2013-06-21-732) took effect; the 2022 amendments to that regulation transposed Directive (EU) 2016/2102 (the WAD) via the EEA. The full EAA equivalent followed in 2024 with the Accessibility for Products and Services Act (Lov om tilgjengelegheit for produkt og tenester), in force from 28 June 2025. Beneath it all sits the Equality and Anti-Discrimination Act of 2017 (LDL) and the 2014-modernised section 98 of the Constitution.

The constitutional and treaty floor

The 1814 Constitution of the Kingdom of Norway (Kongeriket Noregs grunnlov) was extensively modernised on its bicentenary in 2014 with a new chapter on human rights. Section 98 reads, in Bokmål, "Alle er like for loven. Intet menneske må utsettes for usaklig eller uforholdsmessig forskjellsbehandling" — "All people are equal under the law. No human being must be subject to unfair or disproportionate differential treatment." The Supreme Court (Høyesterett) has used section 98 as an interpretive frame in equality cases, including cases brought under the Equality and Anti-Discrimination Act where the constitutional clause supplies the proportionality lens for measuring whether differential treatment of disabled users is justified.

Norway ratified the UN Convention on the Rights of Persons with Disabilities on 3 June 2013; the convention entered into force for Norway thirty days later, on 3 July 2013. The Optional Protocol — which permits individual complaints to the CRPD Committee — has been the subject of recurring parliamentary debate but, as of 2026, remains unratified, a point repeatedly flagged by the LDO, civil-society organisations, and the CRPD Committee itself. The Committee's 2019 Concluding Observations on Norway's initial report identified accessibility of digital services, deinstitutionalisation, and inclusive education as areas requiring sustained policy attention; the 2025 follow-up review took up the WAD-transposition status and the run-up to the EAA-equivalent application date as the two principal accessibility-implementation markers.

Beyond the CRPD, Norwegian Sign Language (norsk tegnspråk, NTS) carries formal statutory recognition: NTS was first recognised as a national language in 2009 and the recognition was consolidated and elaborated under the 2021 Language and Terminology Act (språklova, in force 1 January 2022). Section 7 of that act treats NTS as one of the languages the public sector has a duty to support, with implications for the linguistic-accessibility obligations attached to public broadcasting, public-sector digital services, and education.

The EEA channel: why EU directives matter in Norway

Norway is not an EU member state. It is a contracting party to the European Economic Area Agreement of 1992, together with Iceland and Liechtenstein on the EFTA side and the EU member states on the other side. The EEA Agreement extends the EU internal market — and the body of EU law relevant to it — into the three EFTA-EEA states. EU directives in EEA-relevant fields (including consumer protection, electronic communications, audiovisual media, transport, and the internal-market dimensions of disability accessibility) are adopted into the EEA Agreement via decisions of the EEA Joint Committee and then implemented by each EFTA-EEA state through national law on a timetable that runs in parallel — with a deliberate slight delay — to the EU's own application timetable.

Both Directive (EU) 2016/2102 (the Web Accessibility Directive) and Directive (EU) 2019/882 (the European Accessibility Act) have been adopted into the EEA Agreement and implemented in Norwegian law: the WAD through 2022 amendments to the ICT Universal Design Regulation, and the EAA through the dedicated 2024 Accessibility for Products and Services Act. Enforcement and supervision in Norway sit with national regulators rather than with EU institutions; the EFTA Surveillance Authority (ESA), not the European Commission, is the body empowered to open infringement proceedings against Norway for failures of transposition or enforcement, with cases decided ultimately by the EFTA Court rather than the Court of Justice of the European Union. The substantive obligations and the technical standards, however, are functionally identical to those that apply in the EU member states.

Public-sector and broad ICT accessibility: the UU-forskriften path

The Regulation on universal design of ICT solutions (Forskrift om universell utforming av IKT-løsninger, FOR-2013-06-21-732, commonly the "UU-forskriften") is the technical rulebook that has carried Norway's universal-design ICT obligations since 1 July 2014. Adopted under the predecessor of the LDL, the regulation imposes universal-design duties on ICT solutions directed at the general public — a scope formula deliberately broader than the EU WAD baseline. The 2022 amendments to the regulation operationalise the EEA-incorporated WAD obligations and expanded its sectoral reach.

Three concrete obligations follow:

• Conformance. In-scope websites, mobile applications, intranets and extranets must conform to the European harmonised standard EN 301 549 (currently v3.2.1, integrating WCAG 2.1 Level AA). UU-tilsynet's guidance fixes the conformance bar at WCAG 2.1 AA pending the formal EN 301 549 update tracking WCAG 2.2; a small number of additional WCAG 2.2 success criteria have been recommended on a non-binding basis.
• Accessibility statement (tilgjengelegheitserklæring). Each public-sector body, and from 2023 each in-scope private-sector entity falling within the regulation's expanded reach, must publish a structured accessibility statement covering conformance, scoped-out content, and a complaint route. Statements are filed into UU-tilsynet's national accessibility-statement registry (løysingsregisteret).
• Feedback and enforcement. Users may submit complaints to the in-scope body and escalate unresolved complaints to UU-tilsynet, which exercises the regulation's supervisory and enforcement powers.

The supervisory authority is the Authority for the Universal Design of ICT (Tilsynet for universell utforming av IKT, UU-tilsynet), hosted within the Norwegian Digitalisation Agency (Digitaliseringsdirektoratet, Digdir). UU-tilsynet was established in 2013 and originally operated under the Difi agency; following the 2020 reorganisation of central digital-government infrastructure into Digdir, UU-tilsynet continued as the dedicated supervisory unit. It runs the monitoring rounds required by the EEA-incorporated Commission Decision (EU) 2018/1523, publishes simplified and in-depth scan results, and is the enforcement body for both UU-forskriften and the 2024 EAA-transposing act.

One distinctive feature of Norway's WAD-equivalent regime is its broader sectoral reach compared with the EU WAD baseline. The Norwegian regulation has, since 2014, applied to ICT directed at the general public regardless of whether the operator is a public-sector body or a private-sector business — meaning that retail websites, online newspapers, banking portals, and similar private-sector consumer services have been subject to universal-design duties for over a decade before the EAA-equivalent obligations under the 2024 act began running. This pre-existing private-sector reach is why the 2024 transposition act stacks on top of, rather than fully replacing, the UU-forskriften regime.

Private-sector products and services: the 2024 EAA-equivalent act

The European Accessibility Act, Directive (EU) 2019/882, was adopted into the EEA Agreement and transposed into Norwegian law through the dedicated Accessibility for Products and Services Act (Lov om tilgjengelegheit for produkt og tenester), enacted in 2024 with substantive obligations taking effect on the EU-wide application date of 28 June 2025. The act is a stand-alone statute rather than an amendment to the LDL; it borrows directly from the EAA's structure, sectoral list, and conformity-assessment regime.

The act covers the directive's full product and service scope:

• Products: computer hardware and operating systems, self-service terminals (ATMs, ticket machines, check-in kiosks, interactive self-service kiosks), consumer terminal equipment with interactive computing capability used to access audiovisual media services, consumer terminal equipment used for electronic communications services, and e-readers.
• Services: electronic communications services (excluding machine-to-machine), services providing access to audiovisual media services, elements of air-, bus-, rail- and waterborne passenger-transport services, consumer banking services, e-books and dedicated software, and e-commerce services.

The act adopts the EAA's micro-enterprise carve-out (fewer than 10 employees and either annual turnover or balance-sheet total not exceeding €2 million, converted to NOK at the prevailing reference rate) for the service-side obligations only; the product-side obligations apply to manufacturers regardless of headcount. The transitional period for terminals already in use on 28 June 2025 extends until 28 June 2045 or the terminal's economically useful end of life, whichever comes first — the same long tail as in the EU member states, calibrated to bank-branch ATM and transport-network depreciation cycles.

The market-surveillance authority for the 2024 act is, again, UU-tilsynet within Digdir — concentrating the WAD-equivalent and EAA-equivalent supervisory functions in a single body, a choice Norway shares with some but not all of the EU member states (Spain split them, Germany kept them together at the BFSG level). UU-tilsynet cooperates with sectoral regulators on the service side: Finanstilsynet (Financial Supervisory Authority) on consumer banking, Nasjonal kommunikasjonsmyndighet (Nkom) on electronic communications, and Medietilsynet on audiovisual media services. Cross-border market surveillance follows the EEA-incorporated procedures of EU Regulation (EU) 2019/1020 and is coordinated through ICSMS-equivalent EEA channels.

The cross-cutting backstop: the Equality and Anti-Discrimination Act

The Equality and Anti-Discrimination Act (Lov om likestilling og forbud mot diskriminering, LOV-2017-06-16-51, commonly likestillings- og diskrimineringsloven or LDL) consolidated four older equality statutes into a single cross-cutting equality law on 1 January 2018. Disability is a protected characteristic alongside gender, ethnicity, religion, sexual orientation, gender identity and age, with two operative duties that bear directly on digital accessibility:

• Universal-design duty (LDL §17). Public-sector bodies and private-sector undertakings directed at the general public must ensure universal design of physical surroundings, including ICT directed at the general public, subject to a disproportionate-burden test. The §17 universal-design duty is the LDL hook on which the UU-forskriften technical rulebook hangs.
• Reasonable-accommodation duty (LDL §18). A separate, individual-claim-oriented duty to provide reasonable accommodation for an identified disabled employee, pupil, student, or service user. §18 is the more common pleading in Anti-Discrimination Tribunal cases involving named claimants.

The act creates a two-tier enforcement institution. The Equality and Anti-Discrimination Ombud (Likestillings- og diskrimineringsombodet, LDO) is an independent advisory body that receives complaints, issues non-binding guidance, and publishes thematic reports. The Anti-Discrimination Tribunal (Diskrimineringsnemnda, DTN) is the quasi-judicial body with binding decisional power: it can find a violation, order corrective action, impose coercive fines (tvangsmulkt) for non-compliance, and — under LDL §38 — award compensation for both economic and non-economic loss. DTN compensation awards in disability-discrimination cases have typically fallen in the NOK 10,000–80,000 range per claimant, with the higher end reserved for cases involving lengthy or repeated denials of accommodation.

DTN decisions are appealable to the ordinary courts, with final review available before the Supreme Court. The relationship between the DTN track and the UU-tilsynet track is complementary rather than overlapping: the DTN handles individual discrimination complaints (including those grounded in digital inaccessibility), while UU-tilsynet handles systemic conformance supervision of the underlying ICT.

Technical standards and conformance

The conformance bar across the public-sector / broad-ICT (UU-forskriften) track and the private-sector products-and-services (2024 act) track is anchored on the same EEA-incorporated harmonised standard, EN 301 549, currently in force at version 3.2.1. EN 301 549 imports WCAG 2.1 Level AA as the baseline web-content conformance requirement and adds further requirements specific to mobile applications, native software, non-web documents, hardware accessibility, and communications functionality. The standard's update to integrate WCAG 2.2 is in progress at ETSI and CEN-CENELEC; UU-tilsynet's published guidance signals that the monitoring methodology will track the new EN 301 549 version on a transitional schedule once it is formally adopted.

Norway's secondary legislation under the 2024 EAA-transposing act — a 2025 regulation (forskrift) on conformity assessment, technical files, and market-surveillance procedure — operationalises the conformity-assessment, EU Declaration of Conformity, CE-marking and technical-file requirements of the directive. Declarations may be issued in Norwegian (Bokmål or Nynorsk) or in English, with a Norwegian translation provided on request from UU-tilsynet during a market-surveillance action.

For accessibility statements — required under UU-forskriften — the EEA-incorporated Commission Implementing Decision (EU) 2018/1523 model template is used, with light Norwegian-language adaptations. The private-sector accessibility-information obligation under the 2024 act is a lighter "information for consumers" notice, in plain Norwegian, covering how the product or service was made accessible, where to direct accessibility complaints, and which conformance standard was used as a basis.

Penalties — the full exposure stack

A common error in compliance budgeting is to look only at the headline administrative-fine number and treat accessibility violations in Norway as relatively cheap. The administrative-fine column is one floor of a five-layer exposure stack: (1) coercive fines (tvangsmulkt) and infringement fees (overtredelsesgebyr) under UU-forskriften and the 2024 act; (2) section 38 LDL compensation awarded by the Anti-Discrimination Tribunal; (3) public-procurement disqualification under the Public Procurement Act (anskaffelsesloven); (4) consumer-protection and class-style exposure via the Consumer Authority (Forbrukartilsynet) and the ordinary courts; and (5) EEA-level pressure via the EFTA Surveillance Authority and ultimately the EFTA Court. Figures below are presented in NOK with a EUR reference at an approximate working rate of NOK 11.5 / €1 (the EAA's micro-enterprise threshold of €2M corresponds to roughly NOK 23M).

Layer 1 — administrative fines and coercive fines under the two ICT statutes

The EAA's Article 30 obliges every transposing jurisdiction — including the EFTA-EEA states — to set penalties that are "effective, proportionate, and dissuasive." Norway's 2024 act implements this through two parallel penalty tools: infringement fees (overtredelsesgebyr), a one-off administrative fine for a finding of non-compliance; and coercive fines (tvangsmulkt), a running daily fine accruing until the non-compliance is remedied. Both tools are available under UU-forskriften via the regulation's enabling sections in the LDL chapter that survived the 2017 consolidation, and both tools are available under the 2024 act in expanded form.

Norway's "very serious" infringement-fee ceiling sits in the mid-range of the EEA spread. By way of comparison: Germany's BFSG §37 caps single-incident fines at €100,000; France's 2023 transposition ordinance allows administrative fines up to €50,000 per non-conforming product with per-day penalties for ongoing non-compliance; Spain's Ley 11/2023 sets a graduated framework reaching €1,000,000 for "very serious" infringements; Italy's transposition (D.Lgs. 82/2022) caps at €40,000; Bulgaria's ZHU "very serious" tier reaches €100,000+; and the Netherlands has signalled exposure of up to 5% of annual turnover for systemic violations. Norway's roughly €260,000 ceiling sits between the German and Spanish positions and is paired with the distinctive Norwegian coercive-fine layer (tvangsmulkt), which can substantially exceed the one-off fine for any operator that delays remediation.

Layer 2 — Section 38 LDL compensation through the Discrimination Tribunal

Beyond the administrative-fine and coercive-fine tracks, individual claimants under the LDL may bring complaints to the LDO and ultimately to the Discrimination Tribunal seeking compensation under section 38. The DTN may award both economic loss (out-of-pocket and earnings-related) and non-economic loss (oppreisning) for the indignity of the discrimination. Awards in DTN disability-discrimination cases have typically fallen in the NOK 10,000–80,000 range per claimant, with a small number of high-profile cases reaching NOK 100,000–200,000 where the discriminatory pattern was systematic or the respondent had been previously found in violation. DTN awards are binding and enforceable in the same way as ordinary court judgments; non-compliance triggers further coercive fines.

Layer 3 — public-procurement disqualification

The Norwegian Public Procurement Act (lov om offentlige anskaffelser, anskaffelsesloven), implementing the EU/EEA procurement directives, requires contracting authorities to consider accessibility from the technical-specification stage onward and allows the exclusion of bidders that have been found to have committed serious professional misconduct — a category that includes adjudicated accessibility-related discrimination decisions and significant infringement-fee findings under the 2024 act. The Norwegian public sector — central administration, county authorities, municipalities, and the publicly-owned health-trust system — purchases substantial volumes of digital products and services; loss of bid eligibility on an active procurement (contract values commonly NOK 5–500 million) routinely exceeds the infringement fee that triggered the disqualification by one to two orders of magnitude.

Layer 4 — consumer-protection and class exposure

The Consumer Authority (Forbrukartilsynet) supervises consumer-protection compliance and, since 2023, has integrated digital-accessibility considerations into its supervision of marketing, e-commerce checkout and consumer-banking practices. The Consumer Authority may issue prohibition orders and impose its own infringement fees of up to 4% of the undertaking's turnover (or NOK 25 million, whichever is greater) for serious breaches of consumer-protection law — a track that overlaps with, rather than replaces, UU-tilsynet supervision and that has been used in 2024 and 2025 against several large online retailers. Norway's Group Action Act (tvisteloven kapittel 35) supports class-style litigation in cases where a digital service systematically excludes a class of users with disabilities, although such actions remain rare in practice.

Layer 5 — EFTA Surveillance Authority pressure

The largest exposure number in the EEA accessibility landscape is not a fine on a business — it is the lump-sum and daily penalty the EFTA Court can impose on Norway under the EEA Agreement for failing to implement or enforce an incorporated directive. The EFTA Surveillance Authority (ESA), the EFTA-side counterpart to the European Commission, opens infringement proceedings against Norway for transposition or enforcement failures; cases unresolved at the reasoned-opinion stage are referred to the EFTA Court. ESA has, over the past decade, opened several disability-and-internal-market proceedings against the EFTA-EEA states, including a 2024 case against Norway concerning the timely transposition of the WAD revisions into UU-forskriften. The pressure of an open ESA proceeding routinely produces a step-change in how aggressively UU-tilsynet uses its existing infringement-fee and coercive-fine powers.

Enforcement record and outlook

UU-tilsynet's enforcement record over the past decade is among the most active of the EEA jurisdictions on a per-capita basis. The supervisor's twice-yearly monitoring rounds produce simplified scans of roughly 2,400 in-scope public-sector solutions and a smaller in-depth tranche of around 30–50 sites per cycle; findings of non-conformance trigger remedial-action orders, with coercive fines applied in cases of persistent non-compliance and one-off infringement fees applied for documentation failures and procedural breaches. Decisions are published on UU-tilsynet's website with naming, in line with the Norwegian preference for transparent supervisory communication. The annual reports document a slow but steady upward trend in measured conformance across the public sector, with the long tail of municipal and small-public-sector websites remaining the principal compliance gap.

Private-sector enforcement under the 2024 act started on 28 June 2025 and is still inside its first surveillance cycle as of mid-2026. UU-tilsynet's published 2025–2026 work programme prioritises: consumer-banking app accessibility, e-commerce checkout accessibility (with cross-referencing to Forbrukartilsynet's parallel consumer-protection programme), self-service ticketing kiosks at major transport hubs (Oslo airport Gardermoen, Bergen, Trondheim and Tromsø transport interchanges), and e-book reader devices and software placed on the Norwegian market. The first round of infringement-fee decisions under the 2024 act is expected through the second half of 2026; current expectation in the regulatory community is that UU-tilsynet will give regulated entities a short formal grace period (typically 60 days corrective-action) before assessing infringement fees, except in cases of egregious or repeated non-compliance.

The Discrimination Tribunal's caseload on digital-inaccessibility-as-discrimination has been a quietly important enforcement strand: 2024 and 2025 saw DTN decisions against two major Norwegian retail banks, a municipal-administration portal in the Greater Oslo region, and a national e-pharmacy platform. The DTN's substantive findings are appealable to the ordinary courts; appeals to the Oslo District Court (Oslo tingrett) and onwards have generally upheld the Tribunal's findings while occasionally adjusting the section 38 compensation figures.

What's coming in 2026–27

Three concrete developments to watch. First, the secondary legislation under the 2024 act is being operationalised through 2026: detailed technical-file requirements, the form of the EU Declaration of Conformity for in-scope products, and the procedure for designating Norwegian notified bodies under the EEA-incorporated conformity-assessment regime. Second, UU-tilsynet has announced (April 2025) an updated national monitoring methodology designed to align Norwegian WAD-equivalent supervision with WCAG 2.2 once EN 301 549 formally tracks the new version, with a transitional period running through 2027. Third, Norway's response to the CRPD Committee's 2025 follow-up review is due in 2027, with the Optional Protocol question and the section 38 LDL compensation ceiling both expected to feature; ratification of the Optional Protocol has been the subject of three separate Storting motions since 2020, with the Solberg-era resistance giving way to a more open stance under the current government coalition.

The 2024–2030 universal-design strategy (Bærekraft og like muligheter — et universelt utformet Norge), coordinated by Bufdir, is the policy document that lines up implementation across line ministries; it sets binding intermediate targets for 2027 and 2030 covering public-sector ICT, transport, education, and the built environment. The strategy's mid-term review is scheduled for 2027 and will be the policy moment at which Norway's two-track regime (UU-forskriften + 2024 act) is measured against its stated objectives.