As a Norwegian company, Runbox is occasionally asked how the U.S. CLOUD Act affects our users—and...
Why We Require a Norwegian Court Order to Disclose User Data
Mar 3, 2026 | Data Regulation
Recent reports reveal that some companies are handing over user data when served with...
EU’s AI Act versus GDPR – are there overlaps and contradictions?
Mar 9, 2025 | Data Regulation
Post updated 31.03.2025 Table of Contents The basicsDifferences in scope, overlaps in...
Navigating Information on the Internet
Feb 27, 2025 | Data Regulation
The internet has transformed how we communicate, access information, and connect with each other,...
Your Data, Your Rights: A Guide to GDPR
Jan 28, 2025 | Data Regulation
Introduced by the European Union (EU) in May 2018, the General Data Protection Regulation (GDPR)...
The FTC’s Report on Big Tech’s Overreach
Nov 20, 2024 | Data Regulation
The Federal Trade Commission (FTC) has released a report exposing how Big Tech companies are...
EU’s AI Act: What it is all about
Nov 7, 2024 | Data Regulation
From the perspective of the general public and society as a whole, so-called Artificial...
The Grindr case illustrates how Norwegian authorities fight against misuse of personal information
Aug 25, 2024 | Data Regulation
Oslo District Court has found Grindr’s sharing of personal data illegal as a result of the...
Update: Meta’s behavioural advertising vs GDPR
Dec 10, 2023 | Data Regulation
This is blog post #20 in our series on the GDPR and is a continuation of the blog post # 19 which...
The case of GDPR vs Meta’s illegal behavioral advertising
Oct 17, 2023 | Data Regulation
This is blog post #19 in our series on the GDPR. Runbox takes a clear stand against big tech...
Be privacy concerned when using ChatGPT
Oct 17, 2023 | Data Regulation
This is blog post #18 in our series on the GDPR. “Don’t tell anything to a chatbot you want to...
Privacy, GDPR, and Google Analytics – Revisited
Oct 17, 2023 | Data Regulation
This is blog post #17 in our series on the GDPR. Summary of the case In our blog post on 23...
On the EU-US data transfer problem
Mar 19, 2023 | Data Regulation
This is blog post #16 in our series on the GDPR. At Runbox we are always concerned about data...
Privacy, GDPR, and Google Analytics
Oct 23, 2022 | Data Regulation
This is blog post #15 in our series on the GDPR. Four European Data Protection Authorities (DPAs)...
The Norwegian Consumer Council’s voice is heard worldwide
Oct 18, 2021 | Data Regulation
The Norwegian Consumer Council (NCC) has taken a strong position against commercial surveillance...
Out of Control: Apps that share personal data revealed by the Norwegian Consumer Council
Apr 13, 2021 | Data Regulation
“If you are not paying for the product, then you are the product”. This is a common saying when...
The Norwegian COVID-19 contact tracing app is banned by the Data Protection Authority
Oct 24, 2020 | Data Regulation
GDPR in the Wake of COVID Spread: Privacy under Pressure - Part 2 Our previous blog post in this...
GDPR in the Wake of COVID-19: Privacy Under Pressure
May 5, 2020 | Data Regulation
Tech companies all over the world are rushing to support health authorities in combating the...
GDPR implementation part 8: “Personal data” in the EU and the US is not the same
Feb 13, 2020 | Data Regulation
We usually think of “personal data” as a term that contains for instance a person’s full name,...
GDPR implementation part 7: Information and Tools for Implementation of Users’ Rights
Nov 23, 2019 | Data Regulation
One of the main objectives for the European Union (EU) when they developed the replacement for the...
GDPR implementation part 6: Access Control and Permissions
Oct 24, 2019 | Data Regulation
In part 3 of this blog series we described how we mapped the “world” of our operations, including...












