Norway SMS Compliance Guide: Marketing Control Act, GDPR & Sender ID Regulations 2025

Norway SMS Market Overview

Norway operates a highly developed mobile market with near-universal smartphone penetration. Major carriers include:

• Telenor (MNC 242-01, 242-12)
• Telia (MNC 242-02, 242-05)
• Ice (MNC 242-06, 242-14)

These operators provide extensive network coverage across urban and rural areas. While OTT messaging apps like WhatsApp and Facebook Messenger are popular, SMS remains the primary channel for business communications, particularly for authentication, notifications, and marketing messages.

Key SMS Features and Capabilities in Norway

Two-way SMS Support

Norway fully supports two-way SMS with no restrictions. Use this capability for:

• Interactive messaging campaigns
• Customer service applications
• Appointment confirmations with response handling
• Surveys and feedback collection

Concatenated Messages (Segmented SMS)

All major Norwegian carriers support message concatenation.

Character limits:

• GSM-7 encoding: 160 characters per segment
• Unicode (UCS-2): 70 characters per segment

Encoding:

• Use GSM-7 for standard Latin characters
• Use UCS-2 for Norwegian-specific characters (Æ, Ø, Å) or special characters

Billing: Each segment is billed separately. Messages exceeding the character limit are automatically split and concatenated on delivery.

MMS Support

Norway converts MMS to SMS with an embedded URL link to the multimedia content. This ensures reliable delivery while preserving rich media capabilities.

Best practices:

• Use short URLs to preserve character count
• Include clear instructions for accessing content
• Test links before sending campaigns

Recipient Phone Number Compatibility

Number Portability

Number portability is fully available in Norway. Users can keep their phone numbers when switching carriers. The system automatically updates routing information, so number portability does not affect message delivery.

Sending SMS to Landlines

Norway does not support SMS to landline numbers. Attempts to send to landlines return a 400 error (code 21614) with no delivery and no charges.

Validation: Filter landline numbers before sending. Norwegian mobile numbers typically start with 4 or 9.

SMS Compliance Requirements in Norway: Marketing Control Act & GDPR

Norway enforces strict data privacy and consumer protection regulations. All SMS communications must comply with:

• GDPR – European data protection regulation
• Marketing Control Act (markedsføringsloven) – Section 15 governs electronic marketing
• Norwegian E-Com Act – Effective January 1, 2025

Regulatory authorities:

• Norwegian Communications Authority (Nkom) – Telecommunications oversight
• Norwegian Data Protection Authority (Datatilsynet) – GDPR enforcement

Consent Requirements and Opt-In Rules

Marketing Control Act Section 15 requires explicit prior consent for all marketing SMS:

• Active opt-in is mandatory (no pre-ticked consent boxes)
• Consent must be freely given, specific, informed, and unambiguous (GDPR Article 4)
• Requires clear affirmative action (clicking "I agree" or checking an unchecked box)
• Cannot collect consent via SMS itself

Document consent with:

• Timestamp
• Source
• Scope
• Recipient identity

Maintain consent records and make them readily available for audit.

Existing Customer Exception:

Send marketing SMS to existing customers without prior consent if:

• You obtained the electronic address during a sale
• Marketing relates only to your own goods or services
• Products correspond to those on which the customer relationship is based

Verified January 2025 per Marketing Control Act guidelines.

Best practices for obtaining consent:

• Use clear, unambiguous language
• Specify message types recipients will receive
• Provide examples of content and frequency
• Store consent data securely with backups
• Make consent withdrawal as easy as consent granting

HELP/STOP and Other Commands

Support these required keywords:

• STOPP or STOP – Opt-out
• HJELP or HELP – Assistance

All keywords must function in both Norwegian and English. Send response messages in Norwegian unless the recipient specifies otherwise. Process opt-out requests within 24 hours.

Central Marketing Exclusion Register (Reservasjonsregisteret)

Norway maintains the Central Marketing Exclusion Register (Reservasjonsregisteret), established in 2001 and administered by Brønnøysund Register Centre.

Legal requirements:

• Update your lists from the register no later than one month before use (verified October 2024)
• Check the register monthly
• Covers addressed advertising by mail and telephone sales
• All distributors of advertising aimed at private persons must comply

Individual rights: Private persons can opt out of telephone sales and direct addressed marketing.

Best practices:

• Check the registry before each campaign
• Remove registered numbers immediately
• Maintain internal suppression lists
• Document opt-out requests and processing dates
• Process opt-outs within 24 hours

Time Zone Sensitivity

Avoid sending non-essential messages between 20:00 and 08:00 GMT+1. Respect Norwegian public holidays. Emergency notifications are exempt from time restrictions.

Optimal sending times: Business hours (09:00–17:00) for best engagement.

Alphanumeric Sender ID Requirements for Norway

Alphanumeric Sender ID

Fully supported with no pre-registration required. Dynamic usage is allowed.

Sender ID preservation: Yes, displayed as sent

Character limits: Typically 11 characters maximum

Format: Alphanumeric characters only (A-Z, 0-9)

Long Codes

Support:

• Domestic long codes: Not supported
• International long codes: Fully supported

Sender ID preservation: Yes

Provisioning time: 1–2 business days

Use cases:

• Two-way communication
• Customer support
• Transactional messages

Short Codes

Not currently supported in Norway. Use alphanumeric sender IDs or international long codes as alternatives.

Restricted SMS Content, Industries, and Use Cases

Prohibited content:

• Gambling and lottery-related content
• Adult content and explicit material
• Misleading or fraudulent content

Restricted content:

• Cryptocurrency promotions (require special approval)

Regulated industries:

• Financial services – Comply with financial regulations
• Healthcare – Follow patient privacy laws
• Political messaging – Include clear sender identification

URL Whitelisting and Content Filtering

Carrier filtering rules:

• Whitelist URLs with carriers to prevent blocking
• Messages with non-whitelisted URLs may be filtered
• Content is screened for prohibited keywords and phrases

Avoid filtering by:

• Registering URLs with carriers before sending
• Using approved URL shorteners
• Avoiding excessive punctuation and special characters
• Maintaining consistent sender IDs

Best Practices for Sending SMS in Norway

Messaging Strategy

• Keep messages under 160 characters when possible
• Include clear calls-to-action
• Personalize messages using recipient data
• Maintain consistent branding and tone
• Ensure compliance with Marketing Control Act Section 15 (active opt-in required)

Sending Frequency and Timing

• Limit marketing messages to 2–4 per month per recipient
• Space messages appropriately (minimum 48 hours between messages)
• Respect Norwegian holidays and cultural events
• Monitor engagement metrics to optimize timing
• Verify consent documentation before each campaign

Localization

• Default to Norwegian for all standard messages
• Offer language preference selection
• Include special characters (Æ, Ø, Å) when appropriate
• Consider cultural context in message content

Opt-Out Management

• Process opt-outs within 24 hours
• Maintain centralized opt-out database
• Confirm opt-out with one final message
• Conduct regular audits of opt-out list compliance

Testing and Monitoring

• Test across major Norwegian carriers (Telenor, Telia, Ice)
• Monitor delivery rates by carrier
• Track engagement metrics (click-through rates, response rates)
• Test opt-out functionality regularly

SMS API Integration Examples for Norway

Twilio

Twilio provides a robust REST API for sending SMS messages to Norway. Authentication uses account SID and auth token credentials.

import { Twilio } from 'twilio';

// Initialize Twilio client
const client = new Twilio(
  process.env.TWILIO_ACCOUNT_SID,
  process.env.TWILIO_AUTH_TOKEN
);

// Function to send SMS to Norway
async function sendNorwaySMS(
  to: string,
  message: string,
  senderId: string
) {
  try {
    // Ensure number is in E.164 format for Norway
    const formattedNumber = to.startsWith('+47') ? to : `+47${to}`;

    const response = await client.messages.create({
      body: message,
      from: senderId, // Alphanumeric sender ID or long code
      to: formattedNumber,
    });

    console.log(`Message sent successfully! SID: ${response.sid}`);
    return response;
  } catch (error) {
    console.error('Error sending message:', error);
    throw error;
  }
}

Sinch

Sinch offers a comprehensive SMS API with support for Norway's messaging requirements. Uses bearer token authentication.

import axios from 'axios';

class SinchSMSClient {
  private readonly apiToken: string;
  private readonly serviceId: string;
  private readonly baseUrl: string;

  constructor(apiToken: string, serviceId: string) {
    this.apiToken = apiToken;
    this.serviceId = serviceId;
    this.baseUrl = 'https://sms.api.sinch.com/xms/v1';
  }

  async sendSMS(to: string, message: string, senderId: string) {
    try {
      const response = await axios.post(
        `${this.baseUrl}/${this.serviceId}/batches`,
        {
          from: senderId,
          to: [to],
          body: message
        },
        {
          headers: {
            'Authorization': `Bearer ${this.apiToken}`,
            'Content-Type': 'application/json'
          }
        }
      );

      return response.data;
    } catch (error) {
      console.error('Sinch SMS Error:', error);
      throw error;
    }
  }
}

MessageBird

MessageBird provides a straightforward API for sending SMS to Norway with support for all local features.

import { MessageBird } from 'messagebird';

class MessageBirdClient {
  private client: MessageBird;

  constructor(apiKey: string) {
    this.client = new MessageBird(apiKey);
  }

  sendSMS(
    to: string,
    message: string,
    senderId: string
  ): Promise<any> {
    return new Promise((resolve, reject) => {
      this.client.messages.create({
        originator: senderId,
        recipients: [to],
        body: message,
        type: 'sms'
      }, (err, response) => {
        if (err) {
          reject(err);
        } else {
          resolve(response);
        }
      });
    });
  }
}

Plivo

Plivo offers reliable SMS delivery to Norway with support for high-volume messaging.

import plivo from 'plivo';

class PlivoSMSClient {
  private client: plivo.Client;

  constructor(authId: string, authToken: string) {
    this.client = new plivo.Client(authId, authToken);
  }

  async sendSMS(
    to: string,
    message: string,
    senderId: string
  ) {
    try {
      const response = await this.client.messages.create({
        src: senderId,
        dst: to,
        text: message,
        url_strip_query_params: false
      });

      return response;
    } catch (error) {
      console.error('Plivo SMS Error:', error);
      throw error;
    }
  }
}

API Rate Limits and Throughput

• Default rate limit: 100 messages per second
• Burst capacity: Up to 1,000 messages per minute
• Daily sending quota: Based on account level

Strategies for large-scale sending:

• Implement exponential backoff for retries
• Use batch APIs when available
• Queue messages during peak times
• Monitor throughput metrics

Error Handling and Reporting

• Implement comprehensive logging
• Track delivery receipts
• Monitor bounce rates
• Set up alerts for error thresholds

Norway SMS Compliance Checklist

Key Takeaways

1. Compliance priorities:

   • Obtain explicit consent
   • Honor opt-out requests immediately
   • Respect time restrictions
   • Register sender IDs and URLs

2. Technical best practices:

   • Use proper number formatting
   • Implement retry logic
   • Monitor delivery rates
   • Test across carriers

3. Next steps:

   • Review Norwegian telecommunications regulations
   • Set up monitoring and reporting
   • Establish compliance documentation
   • Test message delivery

Frequently Asked Questions (FAQ)

What are the SMS consent requirements under Norway's Marketing Control Act?

Under Marketing Control Act Section 15, you must obtain explicit prior consent before sending marketing SMS to recipients in Norway. Consent must be freely given, specific, informed, and unambiguous (GDPR Article 4). You cannot use pre-ticked consent boxes, and you cannot collect consent through SMS itself. Active opt-in is mandatory – verified as of January 2025.

What is the Central Marketing Exclusion Register (Reservasjonsregisteret)?

The Central Marketing Exclusion Register (Reservasjonsregisteret) is Norway's national opt-out registry established in 2001 and administered by Brønnøysund Register Centre. It allows private individuals to opt out of addressed advertising by mail and telephone sales. Businesses are legally required to update their lists from the register no later than one month prior to use.

Do I need to check the Reservation Registry before sending SMS in Norway?

Yes. All distributors of advertising aimed at private persons are legally obliged to check the Central Marketing Exclusion Register monthly (verified October 2024). Update your lists from the register no later than one month before use, remove registered numbers immediately, and process opt-outs within 24 hours.

Can I use alphanumeric sender IDs for SMS in Norway?

Yes, alphanumeric sender IDs are fully supported in Norway with no pre-registration required. Dynamic usage is allowed, and sender IDs are preserved and displayed as sent to recipients. Character limits are typically 11 characters maximum using alphanumeric characters only (A-Z, 0-9). This makes alphanumeric sender IDs ideal for brand recognition in transactional and marketing messages.

What are the mobile network codes for Norwegian carriers?

Norway uses MCC 242. The major carriers have the following MNC codes: Telenor (242-01, 242-12), Telia (242-02, 242-05), and Ice (242-06, 242-14). These carriers provide extensive network coverage across urban and rural areas throughout Norway.

When did the Norwegian E-Com Act take effect?

The Norwegian E-Com Act took effect on January 1, 2025. This law aligns Norway's electronic communication regulations with the EU's ePrivacy Directive and introduces stricter rules for cookie consent and user data transparency. All SMS communications must comply with this act along with the Marketing Control Act and GDPR.

Can I send marketing SMS to existing customers without consent in Norway?

Yes, but only under specific conditions. You may send marketing SMS to existing customers without prior consent if: (1) you obtained the electronic address during a sale, (2) marketing relates only to your own goods or services, and (3) products correspond to those on which the customer relationship is based. This exception is defined in Marketing Control Act guidelines, verified January 2025.

What time restrictions apply to SMS marketing in Norway?

Avoid sending non-essential marketing messages between 20:00 and 08:00 GMT+1. Respect Norwegian public holidays and consider business hours (09:00–17:00) for optimal engagement. Emergency notifications are exempt from time restrictions. Limit marketing messages to 2–4 per month per recipient with minimum 48-hour spacing.

Do I need to whitelist URLs for SMS in Norway?

Yes. Norwegian mobile operators block and filter SMS content containing web addresses (URLs). If your SMS contains a web URL, you must contact your SMS provider to add your content to an allowlist to prevent delivery failure. When content registration is complete, send messages with an International Long Code Sender ID or Alphanumeric Sender ID for best results.

Additional Information

Official resources:

• Norwegian Communications Authority (Nkom) – Telecommunications regulator
• Norwegian Data Protection Authority (Datatilsynet) – GDPR enforcement
• Central Marketing Exclusion Register – Opt-out registry (Brønnøysund Register Centre)
• Consumer Authority Guidelines on Marketing by E-mail, SMS, etc. – Official marketing compliance guidance

Industry guidelines:

• GSMA Guidelines for Norway
• Mobile Marketing Association Best Practices

Local regulations:

• Marketing Control Act (markedsføringsloven, Act No. 2 of January 9, 2009) – Section 15 governs electronic marketing
• Personal Data Act (personopplysningsloven) – Implements GDPR in Norway
• Electronic Communications Act (ekomloven) – Updated January 1, 2025
• Norwegian E-Com Act – Effective January 1, 2025 (aligns with EU ePrivacy Directive)

Verification date: All regulatory information verified as of January 2025.