Cybersecurity Policy Report, Norwegian DPA to Review Websites’ User Tracking Practices, (Apr 11, 2025)

By Tony Foley

Datatilsynet, the Norwegian data protection authority, has launched an audit of a selection of websites using various tracking tools, with an emphasis on the use of tracking pixels.

In a news release announcing the audit, Datatilsynet explained that tracking pixels were tools that automatically send information about website visitors to third parties. These third parties, in turn, can potentially use the personal data for their own purposes. The audit will focus on whether the websites share private or sensitive personal information about their users with large, international technology companies.

The agency said the following categories would be subject to audit: (1) services aimed at children; (2) health services; (3) associations targeting disadvantaged groups; and (4) public businesses.

Depending on the type of website and the information involved, sensitive information about website visitors may be derived, including information about an individual’s personal information, health, sexual orientation, or religion. Datatilsynet noted that it was important to prevent this type of information from being shared illegally.

The agency said it would assess websites during the case management process and send notices of decisions where it finds a violation of the law. Businesses will be given the chance to comment on Datatilsynet’s findings for the agency’s consideration before a final decision is reached.

News: InternationalLegislation DataPrivacy