Notification Detail | TRIS - European Commission

Consultation on the age limit applicable to child's consent in relation to information society services under GDPR article 8

Notification Number:

2025/9028/NO (Norway)

Date received:

18/09/2025

End of Standstill:

19/12/2025

Draft Text:

DA BG HR CS NL ET FI FR GA DE EL HU IT LV LT MT PL PT RO SK SL ES SV EN

Click here for a printable version of this page

Message

Message 901

Communication from the Commission - TRIS/(2025) 2574

Procedure for the provision of information EC - EFTA

Notification: 2025/9028/NO

Notification – Notification – Notifzierung – Нотификация – Oznámení – Notifikation – Γνωστοποίηση – Notificación – Teavitamine – Ilmoitus – Obavijest – Bejelentés – Notifica – Pranešimas – Paziņojums – Notifika – Kennisgeving – Zawiadomienie – Notificação – Notificare – Oznámenie – Obvestilo – Anmälan – Fógra a thabhairt

Does not open the delays - N'ouvre pas de délai - Kein Fristbeginn - Не се предвижда период на прекъсване - Nezahajuje prodlení - Fristerne indledes ikke - Καμμία έναρξη προθεσμίας - No abre el plazo - Viivituste perioodi ei avata - Määräaika ei ala tästä - Ne otvara razdoblje kašnjenja - Nem nyitja meg a késéseket - Non fa decorrere la mora - Atidėjimai nepradedami - Atlikšanas laikposms nesākas - Ma jiftaħx il-perijodi ta’ dewmien - Geen termijnbegin - Nie otwiera opóźnień - Não inicia o prazo - Nu deschide perioadele de stagnare - Nezačína oneskorenia - Ne uvaja zamud - Inleder ingen frist - Ní osclaíonn sé na moilleanna

MSG: 20252574.EN

1. MSG 901 IND 2025 9028 NO EN 18-09-2025 NO NOTIF

2. Norway

3A. Royal Ministry of Trade, Industry and Fisheries
Departement of Trade Policy
P.O. Box 8090, Dep
NO-0032 Oslo
Norway

3B. Royal Ministry of Justice and Public Security
Department of Legislation
P.O. Box 8005 Dep, 0030 Oslo
Norway

4. 2025/9028/NO - SERV50 - Protection of privacy

5. Consultation on the age limit applicable to child's consent in relation to information society services under GDPR article 8

6. Information society services as defined in point (b) of Article 1(1) of Directive (EU) 2015/1535 of the European Parliament and of the Council

7.
Directive (EC) N° 2006/123 on services in the internal market

Information society
The requirement applies regardless of the controller’s or processor’s nationality and place of establishment
The age limit applicably today does not provide sufficient protection for the processing of children’s personal data.
The proposal only concerns the age limit under Norwegian law, and the territorial scope of that age limit, in accordance with article 8 of the GDPR. The proposal contains no other or additional obligations for controllers or processors.

8. The Ministry proposes to raise the age limit for when children can consent to the processing of personal data when using information society services as regulated by GDPR article 8, from 13 to 15 years. The age limit, which currently is 13 years, is provided for in Section 5 of the Norwegian Personal Data Act.

The Ministry also proposes to expand the geographical scope of Section 5. Currently, the age limit of 13 years provided for in Section 5 does not apply to providers of information society services established in other EEA countries. According to the proposal, the age limit provided for in Section 5 shall apply regardless of where the provider is established, if the processing concerns children residing in Norway. Accordingly, under the proposal, the age limit provided for in Section 5 will apply to providers of information society services established in other EEA countries.

9. The purpose of raising the age limit from 13 to 15 years and expanding the geographical scope is to strengthen the protection of children's personal data. GDPR article 8 expressly allows for national law to provide an age limit between 16 and 13 years. Furthermore, according to the understanding of the Ministry, the GDPR leaves it to national law to provide the geographical scope of the age limit proved for by national law in accordance with article 8.

The proposal only concerns the age limit under Norwegian law, and the territorial scope of that age limit, in accordance with article 8 of the GDPR. The proposal contains no other or additional obligations for controllers or processors.

10. References of the Basic Texts: No Basic Text exists

11. No

12.

13. No

14. No

15. No

16.
TBT aspects: No

SPS aspects: No

**********
European Commission
Contact point Directive (EU) 2015/1535
email: grow-dir2015-1535-central@ec.europa.eu

Disclosed messages

message-id	Year	Number	Country	Type	Title	Date received	Is answer to
113119	2025	2575	COMEuropean Commission	903	Receipt of the draft text	18-09-2025
113120	2025	2576	COMEuropean Commission	037	Competitiveness analysis	18-09-2025
113316	2025	2772	COMEuropean Commission	931	Request for supplementary information	08-10-2025
113564	2025	3020	NONorway	961	Answer from an EFTA Country	21-10-2025	2025-2772

Languages

Stakeholders Contributions

The TRIS website makes it easy for you or your organization to share your views on any given notification.

Due the notification’s status or the end of standstill, we are currently not accepting any further contributions for this notification via the website.

No contributions were found for this notification