BankID Approval Decision Postponed Until After Summer in Norway

The National Communications Authority (Nkom) has announced a delay in its decision regarding BankID's security certification, pushing the resolution to sometime after the summer break. This comes after Nkom had previously flagged concerns, warning that BankID could face revocation of its highest security level if it failed to tighten its protocols for distributing code tokens. Currently, these tokens are often sent via mail, a practice that falls short of the requirement for physical presence and identification verification for the highest security tier. Nkom is undertaking a thorough review of the documentation provided by the banks by the April 22 deadline. Section Chief Sander Norrøne Ask assured the public that BankID is not at risk of immediate discontinuation, stating, "The trust in the service is what we must safeguard. When almost the entire population uses the same solution, we must be sure that the security is actually good enough." This cautious approach by Nkom reflects the critical role BankID plays in Norwegian digital life and the paramount importance of maintaining public trust through robust security measures.

“

We shall carefully review the documentation and take the time necessary for the case to be sufficiently illuminated.