11. Who do we disclose your personal data to?
UDI has a duty of confidentiality and may only disclose your personal data if authorised by law, if you have given your consent, or if you have appointed a representative (such as a lawyer or legal adviser). You may withdraw your consent at any time.
Several public authorities are entitled by law to obtain information from UDI, including the Norwegian Tax Administration, NAV, the Norwegian State Educational Loan Fund (Lånekassen), the National Population Register, and the police. We are also required to disclose information to other European countries that cooperate on border control, visa regulations, police duties, and the processing of protection (asylum) applications (i.e., countries participating in the Schengen and Dublin cooperation). In cases concerning repatriation and assisted return, we send letters to the municipality and the Norwegian State Housing Bank (Husbanken).
We also disclose certain information to international organisations and special interest organisations that assist us in immigration cases, such as Caritas, the European Technology and Training Center (ETTC), and the International Organization for Migration (IOM). Businesses and individuals that carry out tasks for UDI may also be given access to information that is necessary for their work, such as asylum reception centre operators.
UDI may also provide non-confidential information to other public agencies, businesses, and individuals where there is a legal basis for doing so. For instance, we provide information to the Labour Inspection Authority (Arbeidstilsynet) and employers regarding whether a person is legally permitted to work in Norway.
In some cases, UDI exchanges personal data with international organisations in third countries as part of our work. Such transfers are based on Article 49(1) second paragraph of the General Data Protection Regulation (GDPR). In some cases, UDI may also disclose information from individual cases for research purposes. If the research cannot be conducted without information identifying individuals, UDI may, following a specific assessment, disclose information that identify individuals.
See information about how researchers may request access to data (in Norwegian only)
Here you can read more about ongoing research and development projects (in Norwegian only)