Norway

A cybercrime committee has on November 4, 2003 presented to the Ministry of Justice a proposal for a new provision in the Penal Code:

The Odelsting, a chamber in the Parliament (Stortinget) has on March 4, 2005, made a recommendation for an Act amending the Penal Code and the ratification of the Council of Europe Convention on Cybercrime. It was enacted on April 8, 2005 and entered into force.

Ratification of the Council of Europe Convention on Cybercrime was made on November 4, 2005.

Penal Code § 145:
Any person who unlawfully opens a letter or other closed document or in a similar manner gains access to its contents, or who breaks into another persons locked depository shall be liable to fines or to imprisonment for a term not exceeding 6 months.
The same penalty shall apply to any person who unlawfully obtains access to data or programs which are stored or transferred by electronic or other technical means.
If damage is caused by the acquisition or use of such unauthorized knowledge, or if the felony is committed for the purpose of obtaining for any person an unlawful gain, imprisonment for a term not exceeding 2 years may be imposed.
Accomplices shall be liable to the same penalty.
Public prosecution will only be instituted when the public interest so requires.

Penal Code §145b:
Any person who unlawfully makes available a computer password or similar data, by which the whole or any part of a computer system is capable of being accessed, shall be sentenced for spreading of access data, to a fine or imprisonment not exceeding 6 months or both.
Serious spreading of access data shall be sentenced to imprisonment not exceeding 2 years. In deciding whether the spreading is serious, special regard shall be paid to whether the data may access sensitive information, whether the spreading is extensive or whether the conduct in other respects causes a danger for considerable damage.

An accomplice shall be liable to the same penalty.

Penal Code § 151 b:
Any person who by destroying, damaging, or putting out of action any data collection or any installation for supplying power, broadcasting, telecommunication, or transport causes comprehensive disturbance in the public administration or in community life in general shall be liable to imprisonment for a term not exceeding 10 years.
Negligent acts of the kind mentioned in the first paragraph shall be punishable by fines or imprisonment for a term not exceeding one year.
Accomplices shall be liable to the same penalty.