Norwegian regulator: six former BankID issuers failed high-security requirements

Nkom, Norway's communications regulator, found that six former BankID issuers—Bankenes ID-tjeneste, Danske Bank, DNB Bank, Eika Gruppen, Nordea, and Sparebank 1—did not meet the security level 'high' requirements. The finding is based on a review of past compliance, and the implications for current BankID operations or potential penalties remain unclear. This matters because BankID is a critical national digital identity infrastructure, and security lapses could affect trust and cybersecurity posture.