New Norwegian regulation: Utility providers must authenticate and capture consent digitally

We’ve heard from a lot of our customers in the Norwegian utility sector that the new regulations and requirements are worrying them. Either because they’re not clear on what exactly they need to do or because they don’t feel like they have the tools they need to actually meet the requirements as laid out by the regulators.

Before we go into what these requirements are and how you can make sure you’re taking the right precautions, we want to emphasise that if you need help with any of this, Scrive is here to help and our experts are only a phone call away. So reach out to us if you have questions, concerns or just want help to navigate these new requirements.

So what are these new requirements? From 1 June 2025, Norwegian utility providers need to verify user identity securely and collect electronic, documented consent when customers switch suppliers or transfer facilities.

The regulation comes after growing concern over weak verification in processes like energy and water supply switching. In short: customers must be who they say they are, and their consent must be traceable.

What the regulation means

Utility providers must:

• Authenticate using a secure eID such as BankID.
• Collect electronic consent that’s documented and auditable.
• Meet assurance standards (like eIDAS “High” or using Qualified Electronic Signatures).
• Stay compliant with GDPR and the Norwegian Personal Data Act.

Failure to comply could bring regulatory penalties, customer mistrust and extra costs from manual or inconsistent workflows.

Turning compliance into an advantage

Scrive helps you meet these requirements with tools that make the process faster, safer and more user-friendly:
BankID to authenticate: secure, high-assurance identity verification built for Norway.

• BankID QES to meet assurance standards and ensure legal validity.
• Scrive eSign for traceable consent: legally binding and tied to verified identity.
• Send a bundle to simplify sending multiple documents as part of a single process.

With our help, you can verify identity, collect consent, and stay compliant, without adding friction for customers or for yourself.