So you thought the Schrems II saga was over? Far from it!
On 15 September 2022, a group of Norwegian authorities published a guidance for the public sector's use of cloud services - taking a different stance on key issues than the Norwegian and Danish data protection authorities.
Unfortunately, the guidance, articles etc. are only in Norwegian, but I've summarized the key issues in English here.
The guidance, which spans over several (web) pages, is substantial. I managed to squeeze it into 40 pages, but only after using font size 9 throughout, two columns and reducing all images... You can read it online here or download the PDF version from my LinkedIn post here.
And after receiving numerous inquiries, the Norwegian DPA and the representatives for the guidance (DFØ and Digdir) shared a joint statement here. There are likely quite hefty discussions at the moment and we're all curious to see what comes out of this, in the end.
Stay tuned for upcoming episodes on this topic!