sms compliance
sms compliance
Norway SMS Compliance Guide: Marketing Control Act, GDPR & Sender ID Regulations 2025
Comprehensive Norway SMS compliance guide covering Marketing Control Act Section 15, Central Marketing Exclusion Register (Reservasjonsregisteret), GDPR consent requirements, alphanumeric sender IDs, URL whitelisting, and carrier-specific regulations for Telenor, Telia, and Ice networks.
Norway SMS Best Practices, Compliance, and Features
Norway SMS Market Overview
| Locale name: | Norway |
|---|---|
| ISO code: | NO |
| Region | Europe |
| Mobile country code (MCC) | 242 |
| Dialing Code | +47 |
Norway operates a highly developed mobile market with near-universal smartphone penetration. Major carriers include:
- Telenor (MNC 242-01, 242-12)
- Telia (MNC 242-02, 242-05)
- Ice (MNC 242-06, 242-14)
These operators provide extensive network coverage across urban and rural areas. While OTT messaging apps like WhatsApp and Facebook Messenger are popular, SMS remains the primary channel for business communications, particularly for authentication, notifications, and marketing messages.
Key SMS Features and Capabilities in Norway
Two-way SMS Support
Norway fully supports two-way SMS with no restrictions. Use this capability for:
- Interactive messaging campaigns
- Customer service applications
- Appointment confirmations with response handling
- Surveys and feedback collection
Concatenated Messages (Segmented SMS)
All major Norwegian carriers support message concatenation.
Character limits:
- GSM-7 encoding: 160 characters per segment
- Unicode (UCS-2): 70 characters per segment
Encoding:
- Use GSM-7 for standard Latin characters
- Use UCS-2 for Norwegian-specific characters (Æ, Ø, Å) or special characters
Billing: Each segment is billed separately. Messages exceeding the character limit are automatically split and concatenated on delivery.
MMS Support
Norway converts MMS to SMS with an embedded URL link to the multimedia content. This ensures reliable delivery while preserving rich media capabilities.
Best practices:
- Use short URLs to preserve character count
- Include clear instructions for accessing content
- Test links before sending campaigns
Recipient Phone Number Compatibility
Number Portability
Number portability is fully available in Norway. Users can keep their phone numbers when switching carriers. The system automatically updates routing information, so number portability does not affect message delivery.
Sending SMS to Landlines
Norway does not support SMS to landline numbers. Attempts to send to landlines return a 400 error (code 21614) with no delivery and no charges.
Validation: Filter landline numbers before sending. Norwegian mobile numbers typically start with 4 or 9.
SMS Compliance Requirements in Norway: Marketing Control Act & GDPR
Norway enforces strict data privacy and consumer protection regulations. All SMS communications must comply with:
- GDPR – European data protection regulation
- Marketing Control Act (markedsføringsloven) – Section 15 governs electronic marketing
- Norwegian E-Com Act – Effective January 1, 2025
Regulatory authorities:
- Norwegian Communications Authority (Nkom) – Telecommunications oversight
- Norwegian Data Protection Authority (Datatilsynet) – GDPR enforcement
Consent Requirements and Opt-In Rules
Marketing Control Act Section 15 requires explicit prior consent for all marketing SMS:
- Active opt-in is mandatory (no pre-ticked consent boxes)
- Consent must be freely given, specific, informed, and unambiguous (GDPR Article 4)
- Requires clear affirmative action (clicking "I agree" or checking an unchecked box)
- Cannot collect consent via SMS itself
Document consent with:
- Timestamp
- Source
- Scope
- Recipient identity
Maintain consent records and make them readily available for audit.
Existing Customer Exception:
Send marketing SMS to existing customers without prior consent if:
- You obtained the electronic address during a sale
- Marketing relates only to your own goods or services
- Products correspond to those on which the customer relationship is based
Verified January 2025 per Marketing Control Act guidelines.
Best practices for obtaining consent:
- Use clear, unambiguous language
- Specify message types recipients will receive
- Provide examples of content and frequency
- Store consent data securely with backups
- Make consent withdrawal as easy as consent granting
HELP/STOP and Other Commands
Support these required keywords:
- STOPP or STOP – Opt-out
- HJELP or HELP – Assistance
All keywords must function in both Norwegian and English. Send response messages in Norwegian unless the recipient specifies otherwise. Process opt-out requests within 24 hours.
Central Marketing Exclusion Register (Reservasjonsregisteret)
Norway maintains the Central Marketing Exclusion Register (Reservasjonsregisteret), established in 2001 and administered by Brønnøysund Register Centre.
Legal requirements:
- Update your lists from the register no later than one month before use (verified October 2024)
- Check the register monthly
- Covers addressed advertising by mail and telephone sales
- All distributors of advertising aimed at private persons must comply
Individual rights: Private persons can opt out of telephone sales and direct addressed marketing.
Best practices:
- Check the registry before each campaign
- Remove registered numbers immediately
- Maintain internal suppression lists
- Document opt-out requests and processing dates
- Process opt-outs within 24 hours
Time Zone Sensitivity
Avoid sending non-essential messages between 20:00 and 08:00 GMT+1. Respect Norwegian public holidays. Emergency notifications are exempt from time restrictions.
Optimal sending times: Business hours (09:00–17:00) for best engagement.
Alphanumeric Sender ID Requirements for Norway
Alphanumeric Sender ID
Fully supported with no pre-registration required. Dynamic usage is allowed.
Sender ID preservation: Yes, displayed as sent
Character limits: Typically 11 characters maximum
Format: Alphanumeric characters only (A-Z, 0-9)
Long Codes
Support:
- Domestic long codes: Not supported
- International long codes: Fully supported
Sender ID preservation: Yes
Provisioning time: 1–2 business days
Use cases:
- Two-way communication
- Customer support
- Transactional messages
Short Codes
Not currently supported in Norway. Use alphanumeric sender IDs or international long codes as alternatives.
Restricted SMS Content, Industries, and Use Cases
Prohibited content:
- Gambling and lottery-related content
- Adult content and explicit material
- Misleading or fraudulent content
Restricted content:
- Cryptocurrency promotions (require special approval)
Regulated industries:
- Financial services – Comply with financial regulations
- Healthcare – Follow patient privacy laws
- Political messaging – Include clear sender identification
URL Whitelisting and Content Filtering
Carrier filtering rules:
- Whitelist URLs with carriers to prevent blocking
- Messages with non-whitelisted URLs may be filtered
- Content is screened for prohibited keywords and phrases
Avoid filtering by:
- Registering URLs with carriers before sending
- Using approved URL shorteners
- Avoiding excessive punctuation and special characters
- Maintaining consistent sender IDs
Best Practices for Sending SMS in Norway
Messaging Strategy
- Keep messages under 160 characters when possible
- Include clear calls-to-action
- Personalize messages using recipient data
- Maintain consistent branding and tone
- Ensure compliance with Marketing Control Act Section 15 (active opt-in required)
Sending Frequency and Timing
- Limit marketing messages to 2–4 per month per recipient
- Space messages appropriately (minimum 48 hours between messages)
- Respect Norwegian holidays and cultural events
- Monitor engagement metrics to optimize timing
- Verify consent documentation before each campaign
Localization
- Default to Norwegian for all standard messages
- Offer language preference selection
- Include special characters (Æ, Ø, Å) when appropriate
- Consider cultural context in message content
Opt-Out Management
- Process opt-outs within 24 hours
- Maintain centralized opt-out database
- Confirm opt-out with one final message
- Conduct regular audits of opt-out list compliance
Testing and Monitoring
- Test across major Norwegian carriers (Telenor, Telia, Ice)
- Monitor delivery rates by carrier
- Track engagement metrics (click-through rates, response rates)
- Test opt-out functionality regularly
SMS API Integration Examples for Norway
Twilio
Twilio provides a robust REST API for sending SMS messages to Norway. Authentication uses account SID and auth token credentials.
import { Twilio } from 'twilio';
// Initialize Twilio client
const client = new Twilio(
process.env.TWILIO_ACCOUNT_SID,
process.env.TWILIO_AUTH_TOKEN
);
// Function to send SMS to Norway
async function sendNorwaySMS(
to: string,
message: string,
senderId: string
) {
try {
// Ensure number is in E.164 format for Norway
const formattedNumber = to.startsWith('+47') ? to : `+47${to}`;
const response = await client.messages.create({
body: message,
from: senderId, // Alphanumeric sender ID or long code
to: formattedNumber,
});
console.log(`Message sent successfully! SID: ${response.sid}`);
return response;
} catch (error) {
console.error('Error sending message:', error);
throw error;
}
}Sinch
Sinch offers a comprehensive SMS API with support for Norway's messaging requirements. Uses bearer token authentication.
import axios from 'axios';
class SinchSMSClient {
private readonly apiToken: string;
private readonly serviceId: string;
private readonly baseUrl: string;
constructor(apiToken: string, serviceId: string) {
this.apiToken = apiToken;
this.serviceId = serviceId;
this.baseUrl = 'https://sms.api.sinch.com/xms/v1';
}
async sendSMS(to: string, message: string, senderId: string) {
try {
const response = await axios.post(
`${this.baseUrl}/${this.serviceId}/batches`,
{
from: senderId,
to: [to],
body: message
},
{
headers: {
'Authorization': `Bearer ${this.apiToken}`,
'Content-Type': 'application/json'
}
}
);
return response.data;
} catch (error) {
console.error('Sinch SMS Error:', error);
throw error;
}
}
}MessageBird
MessageBird provides a straightforward API for sending SMS to Norway with support for all local features.
import { MessageBird } from 'messagebird';
class MessageBirdClient {
private client: MessageBird;
constructor(apiKey: string) {
this.client = new MessageBird(apiKey);
}
sendSMS(
to: string,
message: string,
senderId: string
): Promise<any> {
return new Promise((resolve, reject) => {
this.client.messages.create({
originator: senderId,
recipients: [to],
body: message,
type: 'sms'
}, (err, response) => {
if (err) {
reject(err);
} else {
resolve(response);
}
});
});
}
}Plivo
Plivo offers reliable SMS delivery to Norway with support for high-volume messaging.
import plivo from 'plivo';
class PlivoSMSClient {
private client: plivo.Client;
constructor(authId: string, authToken: string) {
this.client = new plivo.Client(authId, authToken);
}
async sendSMS(
to: string,
message: string,
senderId: string
) {
try {
const response = await this.client.messages.create({
src: senderId,
dst: to,
text: message,
url_strip_query_params: false
});
return response;
} catch (error) {
console.error('Plivo SMS Error:', error);
throw error;
}
}
}API Rate Limits and Throughput
- Default rate limit: 100 messages per second
- Burst capacity: Up to 1,000 messages per minute
- Daily sending quota: Based on account level
Strategies for large-scale sending:
- Implement exponential backoff for retries
- Use batch APIs when available
- Queue messages during peak times
- Monitor throughput metrics
Error Handling and Reporting
- Implement comprehensive logging
- Track delivery receipts
- Monitor bounce rates
- Set up alerts for error thresholds
Norway SMS Compliance Checklist
Key Takeaways
-
Compliance priorities:
- Obtain explicit consent
- Honor opt-out requests immediately
- Respect time restrictions
- Register sender IDs and URLs
-
Technical best practices:
- Use proper number formatting
- Implement retry logic
- Monitor delivery rates
- Test across carriers
-
Next steps:
- Review Norwegian telecommunications regulations
- Set up monitoring and reporting
- Establish compliance documentation
- Test message delivery
Frequently Asked Questions (FAQ)
What are the SMS consent requirements under Norway's Marketing Control Act?
Under Marketing Control Act Section 15, you must obtain explicit prior consent before sending marketing SMS to recipients in Norway. Consent must be freely given, specific, informed, and unambiguous (GDPR Article 4). You cannot use pre-ticked consent boxes, and you cannot collect consent through SMS itself. Active opt-in is mandatory – verified as of January 2025.
What is the Central Marketing Exclusion Register (Reservasjonsregisteret)?
The Central Marketing Exclusion Register (Reservasjonsregisteret) is Norway's national opt-out registry established in 2001 and administered by Brønnøysund Register Centre. It allows private individuals to opt out of addressed advertising by mail and telephone sales. Businesses are legally required to update their lists from the register no later than one month prior to use.
Do I need to check the Reservation Registry before sending SMS in Norway?
Yes. All distributors of advertising aimed at private persons are legally obliged to check the Central Marketing Exclusion Register monthly (verified October 2024). Update your lists from the register no later than one month before use, remove registered numbers immediately, and process opt-outs within 24 hours.
Can I use alphanumeric sender IDs for SMS in Norway?
Yes, alphanumeric sender IDs are fully supported in Norway with no pre-registration required. Dynamic usage is allowed, and sender IDs are preserved and displayed as sent to recipients. Character limits are typically 11 characters maximum using alphanumeric characters only (A-Z, 0-9). This makes alphanumeric sender IDs ideal for brand recognition in transactional and marketing messages.
What are the mobile network codes for Norwegian carriers?
Norway uses MCC 242. The major carriers have the following MNC codes: Telenor (242-01, 242-12), Telia (242-02, 242-05), and Ice (242-06, 242-14). These carriers provide extensive network coverage across urban and rural areas throughout Norway.
When did the Norwegian E-Com Act take effect?
The Norwegian E-Com Act took effect on January 1, 2025. This law aligns Norway's electronic communication regulations with the EU's ePrivacy Directive and introduces stricter rules for cookie consent and user data transparency. All SMS communications must comply with this act along with the Marketing Control Act and GDPR.
Can I send marketing SMS to existing customers without consent in Norway?
Yes, but only under specific conditions. You may send marketing SMS to existing customers without prior consent if: (1) you obtained the electronic address during a sale, (2) marketing relates only to your own goods or services, and (3) products correspond to those on which the customer relationship is based. This exception is defined in Marketing Control Act guidelines, verified January 2025.
What time restrictions apply to SMS marketing in Norway?
Avoid sending non-essential marketing messages between 20:00 and 08:00 GMT+1. Respect Norwegian public holidays and consider business hours (09:00–17:00) for optimal engagement. Emergency notifications are exempt from time restrictions. Limit marketing messages to 2–4 per month per recipient with minimum 48-hour spacing.
Do I need to whitelist URLs for SMS in Norway?
Yes. Norwegian mobile operators block and filter SMS content containing web addresses (URLs). If your SMS contains a web URL, you must contact your SMS provider to add your content to an allowlist to prevent delivery failure. When content registration is complete, send messages with an International Long Code Sender ID or Alphanumeric Sender ID for best results.
Additional Information
Official resources:
- Norwegian Communications Authority (Nkom) – Telecommunications regulator
- Norwegian Data Protection Authority (Datatilsynet) – GDPR enforcement
- Central Marketing Exclusion Register – Opt-out registry (Brønnøysund Register Centre)
- Consumer Authority Guidelines on Marketing by E-mail, SMS, etc. – Official marketing compliance guidance
Industry guidelines:
Local regulations:
- Marketing Control Act (markedsføringsloven, Act No. 2 of January 9, 2009) – Section 15 governs electronic marketing
- Personal Data Act (personopplysningsloven) – Implements GDPR in Norway
- Electronic Communications Act (ekomloven) – Updated January 1, 2025
- Norwegian E-Com Act – Effective January 1, 2025 (aligns with EU ePrivacy Directive)
Verification date: All regulatory information verified as of January 2025.