Information society services as defined in point (b) of Article 1(1) of Directive (EU) 2015/1535 of the European Parliament and of the Council

Consultation on the age limit applicable to child's consent in relation to information society services under GDPR article 8

The Ministry proposes to raise the age limit for when children can consent to the processing of personal data when
using information society services as regulated by GDPR article 8, from 13 to 15 years. The age limit, which currently is
13 years, is provided for in Section 5 of the Norwegian Personal Data Act.
The Ministry also proposes to expand the geographical scope of Section 5. Currently, the age limit of 13 years provided
for in Section 5 does not apply to providers of information society services established in other EEA countries. According
to the proposal, the age limit provided for in Section 5 shall apply regardless of where the provider is established, if the
processing concerns children residing in Norway. Accordingly, under the proposal, the age limit provided for in Section 5
will apply to providers of information society services established in other EEA countries.