Is it legal to record a meeting in Norway?

Straffeloven (2005) § 205, krenkelse av retten til privat kommunikasjon. Letter a: a fine or imprisonment for up to two years for whoever, without authorisation and by use of a technical aid, secretly listens to or makes a secret recording of a telephone conversation or other communication mellom andre, between others, or of the proceedings of a closed meeting som han ikke selv deltar i, in which he himself does not take part.

The framing is eavesdropping on others, which is what puts a participant outside it.

Yes, and Datatilsynet states the criminal rule in one sentence: "For å ikke rammes av straffeloven, må du selv være tilstede når du skal ta lydopptak." In order not to be caught by the Criminal Code, you must yourself be present when you make an audio recording.

But that is the criminal answer only, and Norway is where the two layers diverge most. Datatilsynet's data protection position is that "I utgangspunktet må du be om samtykke og informere før du tar lydopptak. Du må også ha et legitimt formål med behandlingen." In principle you must ask for consent and inform before making an audio recording, and you must have a legitimate purpose.

And it closes the household exemption for meetings explicitly: "I situasjoner der det gjøres lydopptak av møter eller undervisning … Det vil likevel som regel ikke defineres som en personlig aktivitet." Recording meetings will as a rule not be defined as a personal activity. Datatilsynet gives the worked example of a homeowner covertly recording a tradesman's site visit and says the exemption normally does not apply because the relationship is employer-like, even in the homeowner's own house.

Whether consent can be implied from continuing to speak after a clear announcement was not addressed on any page we opened, and nothing was found on the calendar-invite form.

Norway is the one country in this set where the regulator's own words tell you to ask rather than merely to inform, so use the long form and pause for an answer.

Before we start: I record my meetings so I can write up notes afterwards. It runs on my laptop, the audio is transcribed on this machine and never uploaded, and the audio itself is not saved anywhere, only the text, in a file I keep. Is everyone alright with that? If anyone would rather I didn't, say so now and I'll turn it off.

Longer and shorter versions are on telling people you're recording.

GDPR applies as well, and the analysis is the ordinary European one: a meeting recording is personal data about every identifiable speaker, a transcript without speaker labels is still personal data, the household exemption is read narrowly and a work meeting has a direct connection to a professional activity, you need a lawful basis, and Art. 13 wants the information at the time the data are obtained, which for an always-on recorder means before the substance of the meeting. The European framework covers all of that once rather than on every country page.

Arbeidsmiljøloven chapter 9. § 9-1: the employer may only implement control measures where the measure has an objective basis in the undertaking's circumstances and does not involve a disproportionate burden on the employee. § 9-2 first paragraph: the employer is obliged, as early as possible (så tidlig som mulig), to discuss the need, design, implementation and material change of control measures with the employees' elected representatives, followed by a duty to inform affected employees of the purpose, the practical consequences including how the measure will be carried out, and the expected duration, and a duty to evaluate the measure regularly together with the representatives.

Note what § 9-2 is and is not. It is a duty to discuss, not a co-determination veto of the German kind, so a Norwegian rollout is not blocked by a refusal. It is still the most concrete employee-representation obligation in this set, because it is statutory, it names the timing and it prescribes the content of the notice.

Datatilsynet's employee-side reasoning is worth carrying too: an employee's own covert recording falls outside the rules only where the situation is av rent personlig art, of a purely personal nature, illustrated with repeated harassment, bullying or threats, and it says the exemption will probably not apply to employers at all. Datatilsynet also states that an employer generally may not record employees' telephone calls.

Datatilsynet has a six-part guide devoted to audio recording, which makes Norway the best-sourced country in this survey. Its position in one line: a participant may record without committing the offence, but recording meetings is as a rule not a personal activity, so ask for consent, inform, and have a legitimate purpose.

Because the binding layer in Norway is data protection rather than criminal law, this is where the product's architecture does real work. Transcription runs on your own device, the audio is never written to disk, and nothing is sent anywhere. There is no cloud component, so on our reading we are not a processor under Art. 4(8), which processes personal data on behalf of a controller and presupposes receiving it. That means no Art. 28 data processing agreement to sign with us, no sub-processor list, no international transfer and no transfer impact assessment, because there is no transfer. We found no decision squarely holding that an on-device-only vendor is not a processor, so that is reasoning you can check rather than a settled point.

What it does not do is disclose anything. There is no bot in the participant list and no banner on anyone else's screen, so the transparency obligation rests entirely on you saying something. Earkeep does not make anyone compliant and could not: a tool cannot be compliant, only a processing operation can be lawful.

Where it helps in the room is that stopping is real and checkable. A pause from the live edge releases the microphone and the system audio stream, so your operating system's own recording indicator goes dark in front of the person who asked. A meeting on a connected calendar can be marked never-record. And a stretch of the day, or a saved meeting with its transcript, can be purged from the file on your own disk, with no server copy anywhere to reconcile against.

• Straffeloven § 205
• Arbeidsmiljøloven § 9-1
• Arbeidsmiljøloven § 9-2
• Datatilsynet, lydopptak av samtaler
• Datatilsynet, lydopptak i arbeidslivet
• GDPR, EUR-Lex

• European recording laws: the four layers, the controller question, and all 32 countries.
• Telling people you're recording: the scripts, and the three ways to stop.
• Private by design: why the audio never leaves your computer.

This page is legal information, not legal advice. It summarises provisions and guidance rather than replacing them, and we are not lawyers. If the answer matters, ask someone who can be held to their answer.