Norway's data protection authority, Datatilsynet, published requirements for entities overseeing industry-specific codes of conduct. The eight categories of requirements are based on Article 41 of the EU General Data Protection Regulation and include conflict of interest provisions and mechanisms for review and redress of consumer complaints.