Experiences of GDPR in Norway: Politics of autonomy and control

Abstract

This article explores the challenges Norwegian anthropologists face owing to the implementation of the General Data Protection Regulation (GDPR). The authors’ analysis reveals a tension between the need to comply with data protection regulations and preserve research autonomy and methodological integrity. The authors document how GDPR's bureaucratic control mechanisms have influenced researchers’ conceptualization of ethics, leading to a split between legalistic adherence and critical responses within the anthropological community. This situation has necessitated negotiations with various stakeholders and re-evaluating participatory observational methods, particularly in health research, where access has become increasingly difficult. The article highlights the anthropological community's efforts to navigate these regulations through national debates, establishing forums for ethics in ethnographic research and developing strategies to maintain methodological standards while ensuring GDPR compliance. The authors advocate vigilance against the colonization of bureaucratic logic and seek to secure anthropological representation in regulatory bodies to safeguard the discipline's interests.