The Norwegian Institute of Public Health ('FHI') published, on 24 June 2020, its response ('the Response') to the Norwegian data protection authority's ('Datatilsynet') decision to ban the use of the COVID-19 ('Coronavirus') tracing app with Datatilsynet making a statement on the same. In particular, the FHI noted that they do not agree with Datatilsynet's assessment of the app but has chosen, following Datatilsynet's finding that the data processing by the app was unlawful, to cease all data collection, delete all personal data, and deactivate the app on 16 June 2020. Specifically, the FHI noted that the tracing app is crucial at all stages of the epidemic and that Datatilsynet's finding that the FHI does not have a solution for anonymising and aggregating data is wrong. In addition, the FHI highlighted their choice to use Bluetooth over GPS and to opt for a centralised solution to ensure the accuracy in tracking contacts. Moreover, the FHI noted that they have complied with the data minimisation principle under Article 5(1)(c ) of the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR') as the app only collects data necessary for the fulfilling the purpose of limiting the spread of the infection. In relation to the above, Datatilsynet stated that they will consider the FHI's Response.

You can read the FHI press release here, the Response here, and the Datatilsynet statement here, all only available in Norwegian.