Norway - Digital Public Sector Strategy (2019-2025)
One Digital Public Sector: Digital strategy for the public sector 2019–2025
Norway
RAI-NO-NA-ODPSDXX-2019Norway - Digital Public Sector Strategy (2019-2025) is Superseded in Norway as of 9 Sep 2026, according to regjeringen.no.
PolicyGovernance and OversightData Protection and PrivacyCybersecurity and Model SecurityThe Norwegian national strategy "One digital public sector" (2019–2025) sets a common cross‑sectoral framework to deliver user‑centric, seamless public services, strengthen data sharing and reuse, promote digital‑friendly regulation, and build a coordinated national ecosystem for digital collaboration. The strategy emphasises cybersecurity, privacy, inclusiveness and cooperation between state and municipal actors, and is implemented through national agencies and joint governance structures.
Summary
One digital public sector: Digital strategy for the public sector 2019–2025 (published 11 June 2019) is Norway's joint central‑government and municipal strategy for digitalisation across the public sector. The strategy defines a primary goal — to deliver a simpler everyday life for citizens and businesses — and sets measurable ambitions for 2025: increased digital service delivery, wider digital communication where feasible, improved data sharing and reuse, common national solutions in an interoperable ecosystem, and systematic realisation of benefits from digitalisation. It is explicitly designed as a follow‑up to the government White Paper "Digital Agenda for Norway" (Meld. St. 27, 2015–2016) and addresses recommendations from external reviews (OECD, Office of the Auditor General) to strengthen governance and coordination.
The document organises policy around a set of focus areas: (1) a user‑centric focus and development of seamless services built around prioritised life events (for example: having children; serious illness of a child; losing and finding work; settling in as a new resident; starting and running a business; starting and running a voluntary organisation; death and inheritance); (2) increased data sharing and reuse (including publication of open data where appropriate); (3) digitalisation‑friendly regulation and removal of legal obstacles to reuse and collaboration; (4) establishment of a common ecosystem for national digital collaboration, common architectures and shared solutions; (5) strengthened governance and coordination across administrative levels; (6) enhanced cooperation with the private sector; (7) increased digital competence within the public sector; and (8) integration of cybersecurity and information security into all aspects of service development and operations.
Implementation and follow‑up responsibility is shared between ministries, the Digitalisation and Public Governance Ministry (successor to the Ministry of Local Government and Modernisation as publisher), the Norwegian Digitalisation Agency (Digitaliseringsdirektoratet, Digdir), KS (Norwegian Association of Local and Regional Authorities) and other sector directorates and agencies. Digdir and KS were charged with developing and following up a joint action plan and handlingsplan for the strategy, including coordination around the life events and the common ecosystem. The strategy emphasises reuse of established registers and common solutions (Altinn, ID‑porten, national registers) rather than duplicated systems, and prescribes systematic benefit realisation and monitoring.
On security and rights, the strategy requires that cybersecurity be integrated into service development in line with Norway's national cyber security strategy and that privacy and universal design (accessibility) be mainstreamed. Personal data protection obligations remain governed by existing national and EU/EEA law (including the GDPR); the strategy calls for data protection by design and greater clarity where regulation hinders digitalisation. The strategy does not itself create new criminal penalties but anticipates enforcement, oversight and corrective action through agencies and existing legal frameworks, and links with supervisory bodies such as the Norwegian Data Protection Authority (Datatilsynet) and national security authorities (NSM).
Follow‑up material, including an English translation and the full PDF, is publicly available from the Norwegian government website and is implemented through a series of sectoral initiatives, handlingsplaner, guidance documents and follow‑up reports published by Digdir and other agencies. The strategy remains the reference national framework for public sector digitalisation through 2025 and has been used as the foundation for subsequent national initiatives on data‑driven economy, AI strategy and common infrastructure.
Full article
Read full text ↗Overview
One digital public sector: Digital strategy for the public sector 2019–2025 is Norway's cross‑sector strategy to create a coordinated, user‑centric and secure public sector. Published by the Ministry of Local Government and Modernisation on 11 June 2019, and presented on the government documents site, the strategy sets the primary objective of a "simpler everyday life" for citizens and businesses and defines goals and focus areas to be achieved by 2025. The strategy emphasises seven core focus areas (user‑centric services, data sharing, digital‑friendly regulation, national ecosystem and common solutions, governance and coordination, cooperation with the private sector, competence and cybersecurity) and assigns lead roles to ministries, the Norwegian Digitalisation Agency (Digdir) and KS for operational follow‑up. The full English text is available as a PDF on the Government of Norway website: One digital public sector — full text (PDF).
Definitions
The strategy uses several working definitions central to implementation: "digitalisation" as organisational and service transformation supported by technology; "common solutions" as national shared components and platforms (e.g. identity, authentication, basic registers, service platforms); "life events" as prioritised user journeys defined to drive cross‑agency service integration; and "ecosystem" as the governed set of architectures, standards, interfaces and roles that enable cross‑sector collaboration. These definitions align with terminology in the earlier Digital Agenda White Paper and OECD digital government reviews.
Governance and Institutional Framework
The strategy sets out a collaborative governance model where ministries retain sector responsibility, while national coordination is delivered through territorial cooperation with KS and operational follow‑up by the Norwegian Digitalisation Agency (Digdir). The strategy assigns life‑event ownership to specific ministries for political anchoring and requires joint handlingsplaner (action plans) produced by Digdir and KS. It also references existing oversight bodies (e.g. the Office of the Auditor General) and the need for clearer roles and responsibilities; these recommendations respond to OECD findings that Norway required stronger central coordination. Governance is therefore a hybrid: ministerial accountability combined with a cooperative, programmatic model implemented by directorates and agencies.
Key Focus Areas
The document organises digitalisation around interconnected focus areas: (1) Seamless, user‑centric services built around prioritised life events (such as having children, serious illness of a child, losing and finding work, new in Norway, starting and running a business, starting and running a voluntary organisation, and death and inheritance). (2) Increased sharing and reuse of data — including publication of open data and strengthened use of national registers — to enable better services and promote innovation. (3) Digitalisation‑friendly regulation and legal reviews that remove unnecessary obstacles to digital service delivery. (4) Development of a common ecosystem of national solutions, common architecture and shared components to avoid duplication and reduce costs. (5) Strengthened governance, incentives and funding models for cross‑level cooperation between state and municipal actors. (6) Enhanced public‑private cooperation to stimulate innovation while safeguarding public interest. (7) Measures to increase digital competence across the public sector workforce. (8) Cybersecurity and privacy, requiring that security be built into service development and operations, in line with national guidance and NSM principles (NSM). The strategy enumerates expected benefits and places a strong emphasis on systematic benefit realisation and measurement.
Implementation Framework
Operational follow‑up is assigned to Digdir and KS, with ministries maintaining political responsibility for life events and sector objectives. The strategy envisages action plans, common architectures, prioritisation of common solutions over bespoke systems and use of existing national building blocks (identity services, registers and platforms). It calls for funding models and incentive structures to encourage reuse and cross‑jurisdictional adoption, with Digdir producing guidance and technical standards. The strategy does not create new statutory obligations but sets expectations and governance mechanisms to drive implementation through directives, handlingsplaner and agency instructions.
Monitoring and Evaluation
The strategy mandates monitoring through periodic reporting, indicators linked to 2025 goals and a requirement for systematic realisation of benefits. Digdir, KS and responsible ministries are expected to publish follow‑up plans and progress reports and to use common indicators (service usage, share of digital communications, reuse of data, accessibility metrics). The Office of the Auditor General and other oversight bodies play a role in reviewing benefit realisation and use of public funds.
Penalties, Liability, and Appeals
The strategy itself does not set out novel criminal penalties. Accountability is achieved through governance instruments, budgetary incentives, reporting requirements and existing legal frameworks. Where digitalisation activities intersect with data protection or security obligations, supervisory authorities such as the Norwegian Data Protection Authority (Datatilsynet) and NSM retain enforcement powers under existing laws (e.g. GDPR and national security legislation). Administrative consequences for non‑compliance may include corrective orders, audit findings, funding restrictions and reputational consequences; liability and appeals follow standard administrative law processes.
Relationship to Other Instruments
The strategy is a follow‑up to the White Paper "Digital Agenda for Norway" (Meld. St. 27 (2015–2016)) and aligns with Norway's National Cyber Security Strategy and sectoral strategies (e‑health, AI strategy, Digital21). Instruments such as the Digitaliseringsrundskrivet provide operational guidance to agencies, while sector laws (health, social services, public procurement and privacy law) provide binding legal constraints and enforcement regimes that must be respected when implementing the strategy.
International Alignment
The strategy recognises international frameworks and EEA/EU developments (e.g. GDPR, EU digital policy and standards) and references OECD recommendations. Norway positions the strategy to be compatible with EU/EEA rules and international best practice for interoperability, data protection and cybersecurity. The document also highlights the need to follow EU initiatives on digital public administration and data sharing to maintain alignment and interoperability across borders.
Implementation Timeline
| Event | Date |
|---|---|
| Strategy published (original) | 2019-06-11 |
| Action plan development (Digdir & KS) | 2019–2020 (ongoing updates) |
| Mid‑term review / progress reporting | circa 2022–2023 |
| Target horizon for goals | 2025-12-31 |
Sources and References
| Source | Type |
|---|---|
| One digital public sector – Digital strategy for the public sector 2019–2025 (PDF) | Primary Source |
| One digital public sector – Government summary page (English) | Primary Source |
| Digitaliseringsdirektoratet (Digdir) | Primary Implementation Agency |
| Norwegian Data Protection Authority (Datatilsynet) | Primary Supervisor |
| Norwegian National Security Authority (NSM) | Primary Cybersecurity Guidance |
Requirements for a company
What an organisation has to do under Norway - Digital Public Sector Strategy (2019-2025), at a glance. Not legal advice.
Related Regulations
More AI regulation in Norway
© Regulations.AI · updated on 20 Sep 2026 · reviewed against official sources on 9 Sep 2026