Technology law, in plain text.
Legal analysis of AI, data protection and technology contracts. Written for executives, lawyers and product teams who have decisions to make.
Kjell SteffnerPartner, Nordia LawThe pillars, each with a full overview
Artificial intelligence
The AI Act, risk classification, obligations for providers and deployers, and AI in contracts. Gathered in one place and kept up to date.
Go to artificial intelligencePillar page16 articlesData protection
The GDPR in practice, DPIAs, data processing agreements and transfers to third countries. Written for businesses that build, buy or sell technology.
Go to data protectionPillar page13 articlesContracts
SaaS and cloud agreements, limitation of liability, service levels and exit. Practical guidance for anyone buying or selling technology.
Go to contractsAI agent liability: who pays when an AI agent causes harm?
Under Norwegian law, AI agent liability rests primarily with the business that puts the agent to work. An agent is neither a legal person nor an employee, so the harm is treated as the business's own. Towards customers, ordinary contractual liability applies. The vendor is liable only as far as the contract allows, and the new EU Product Liability Directive does not yet apply in Norway.
Anonymisation under the EDPB guidelines: is your data really anonymous?
Checking AI-generated text: what can businesses learn from a ruling set aside?
Duty to cooperate with the Data Protection Authority: what does it require?
Location data: when does tracking become high-risk processing under the GDPR?
Short explanations of AI, data protection and contracts, filmed for your phone. The articles here go deeper.
@steffner.lawFollow on Instagram“Good legal advice on technology starts with understanding how the technology actually works.”
Kjell Steffner is a partner at Nordia Law and has practised as a lawyer since 1998. He advises on technology and IT, commercial agreements, AI and data protection.
Read profile