Personvernforodningen i et iverksettingsperspektiv - i kommunal sektor

This thesis is about the General data protections regulation (GDPR) in public sector, in the Norwegian local governance. My research question for this thesis is: “What challenges does a local governance experience when it comes to implementing and following up on GDPR? The new Personal Data Act and GDPR came into force on 20 of July 2018 in Norway. Many local governances found that there is a large amount of personal data, and it is challenging for them to have a secure data system for personal data. GDPR protects fundamental rights of natural persons, and their right to personal data. After the new law was implemented, two Norwegian local governances received large fees from the Norwegian Data Protection Agency due to breaches of GDPR. The theoretical framework for this thesis is implementation theory and organizational theory. I discovered through qualitative method, that the local governance had challenges in its implementation process, based on the implementation variables of Van Meter and Van Horn. The implementation process of the GDPR was also structured hierarchically within the organization. The local governance has been in a merger with two other local governances. This turned out to have an impact on the implementation process. This created challenges for the culture of the public organization