I remember reading a comment from a dev working for a mobile app shop which had been bought by a Chinese company: they got instructions to add an analytics binary blob to their app and did it.
That's an anecdote, but the point is that one can't rely on Norwegian courts for enforcing privacy.