Kristian Foss has over 25 years of experience in privacy, IT, and technology law. He leads Bull Digital, Bull's cybersecurity respons service, personvernfabrikken.no, and is a member of the Committee for ICT Law for "Juristenes utdanningssenter".
Kristian works with and lectures on legal issues related to artificial intelligence (AI Act etc.), cybersecurity (Digital Security Act, NIS 2, Cyber Resilience Act, DORA etc.), data rights (Data Act, Data Governance Act etc.) and privacy, including related contract work and board responsibilities.
Previously, he was the president of the IT IP Law Group Europe, Europe's oldest network for technology lawyers, and is a member of Itechlaw as part of Kristian's international work.
Kristian has also worked at Advokatfirmaet Haavind, where he was responsible for technology and media law, and as in-house counsel at EVRY (now TietoEvry).
Awards and rankings
The rating agencies Chambers and Partners, The Legal 500, and Who's Who Legal recommend Kristian as one of Norway's best lawyers in technology, media, and telecom (TMT) and IT/technology. He is also recognized by the ranking agencies as a "thought leader."
Education
2003 | Subjects in history, University of Oslo |
1997 | Master of Laws (LL.M.), University of Oslo |
1988–1989 | Sergeant course (USK), The Norwegian Army |
Work experience
2015– | Partner, Bull |
2007–2015 | Managing partner, Gille advokater DA |
2001–2007 | Attorney/Associate, responsible for technology, IT and telecom, Advokatfirmaet Haavind Vislie AS |
1999–2001 | Associate/Attorney, Legal department, EVRY |
1999 | Co-founder, Idium AS |
1997–1999 | Project manager, attorney and business developer, Grape Interactive AS (Internet consulting firm) |
A new era of cybersecurity in Europe
The EU has adopted the NIS 2 Directive, which will come into force for member states from 18 October 2024. The purpos...
Read moreThe Norwegian act on digital security lags far behind the EU – but soon the time will come
Despite the fact that nearly one-third of all Norwegian companies reported being affected by cyber incidents, Norway ...
Read moreWho's going to pay when thinking machines fail?
Artificial intelligence (AI) has revolutionized the way we live and work, but alongside this progress comes complex q...
Read moreA stricter board responsibility for cyber security
The board is responsible for proper organisation of the company, which also means that both the General manager and b...
Read moreAll that glitters is not AI – check if the AI Act applies to you
There's been a lot of commotion around the AI Act lately, but do you really need to be cocerned? Here are five key points you should check.
Read moreNew requirements for gadgets: 6 key takeaways from the Cyber Resilience Act
An insecure world call for secure digital products. At last, the EU is addressing one of the biggest vulnerabilities we have, says our three attorneys at Bull.
Read more