The EU’s Artificial Intelligence (AI) Act marks a global first, introducing rules for the use and provision of AI systems. At the heart is a commitment to fostering trust in AI to unlock and maximise the vast social and ­economic possibilities offered by these technologies.

All companies face the risk of cyber-attacks. In general, the question is when and not if an attack will strike. Companies should therefore strengthen their cyber resilience and implement robust measures to be prepared to handle all aspects of an attack if/when it occurs.

On Friday 8 December, after 36 hours of trialogue negotiations, the European institutions finally reached agreement on the AI Act. A joint press conference was held on 9 December where the two  lead MEPs, the Secretary of State for digitalisation and artificial intelligence, and the EU Commissioner in charge presented the key elements of the agreement.

The proposal for regulating artificial intelligence by the European Commission marks a global first, introducing a comprehensive legal structure in this domain. This Act targets both AI system providers and users, emphasising significant penalties for non-compliance — potentially up to 40 million Euros or 7% of the total annual turnover. This underscores the importance of adherence to these regulations. At the heart of the Act is a commitment to fostering trust in artificial intelligence, a cornerstone deemed essential for unlocking and maximising the vast social and economic possibilities offered by AI technologies

The Cyberspace Administration of China has issued a draft standard contract for cross-border transfers of personal information out of China which will, if adopted, constitute a valid transfer mechanism under the Chinese Personal Information Protection Law. Both the transferring entity and the overseas recipient must still be aware of additional data protection requirements related to cross-border transfers, including reporting requirements.

Artificial Intelligence

Consumer, marketing and e-commerce

Cyber Security

Data Protection and GDPR

Defence and Security

Employment Law

ESG, compliance and risk management

Information Technology

Investigation and Crisis Management

Life sciences and healthcare

Financial Institutions

Industry

Real Estate

Technology and Digitalisation

Partner

Gry is a leading lawyer within data protection and digitalization. She is the Head of the firm's Data Protection practice. Her practice also includes assisting clients within IT-law/information security, e- privacy law and marketing law. Gry also works with large and complex projects in the intersection between data protection and legislation concerning the use of personal data within specific sectors such as finance and health. 
 
Gry holds a unique combination of in-depth professional knowledge and a commercial mindset. She has 20 years of experience working as a data protection specialist in the Legislation Department in the Ministry of Justice, in Norway’s largest company Equinor and as a long-standing business lawyer.     
 
She advises leading corporations within a variety of sectors, including large group companies, and public authorities on all aspects related to data protection compliance, including the procurement, implementation and development of new technology and new products and services, including necessary agreement to cover the sharing and transfer of personal data. Over the last years her focus has expanded to include larger and more complex projects related to digital business development and the use of new technologies. 

Gry has assisted several international corporations with the implementation of BCR (Binding Corporate Rules). She also assists clients on a regular basis in relation to handling security incidents and with handling technology transactions. She often works in close cooperation with other Wikborg Rein teams such as Commercial property, Financial regulatory, Risk and crisis management and with our firm’s office in Shanghai.  

With a passion for the intersection between technology, law and business development, Gry takes a particular interest in understanding the client's business and in working closely with clients to find effective and business-oriented solutions.  She is a lecturer at Norwegian universities and a regular speaker at industry events. Gry is a member of the Norwegian Bar Association's legal committee for ICT and privacy and a former member of the board of The Norwegian Association for Computers and Law (NFJE). She has for many years been responsible for the Norwegian chapter in the International Comparative Legal Guide (ICLG) on Data Protection.

Gry is highly ranked in Chambers and has received appreciation as Next Generation Partner in Legal 500. She was recently ranked as top 3 data protection lawyers in Norway in the Norwegian annual lawyers survey carried out by Finansavisen.

Jump to main content

Recognitions

"She consistently demonstrates exceptional legal expertise"

"She is very practical and very aware of the business risks. She has good business acumen and is service minded."

"She consistently demonstrates a strong understanding of our needs and ensures that the right team is assembled for each specific matter."