{
  "schema_version": "civicdataforge.cross-border-source-rights-passport.v1",
  "passport_id": "no.brreg.entity-register-20260823",
  "source": {
    "source_id": "norway-brreg-entity-register",
    "origin_country": "NO",
    "authority": "Brønnøysundregistrene / Brønnøysund Register Centre",
    "official_url": "https://data.brreg.no/enhetsregisteret/api/dokumentasjon/en/index.html",
    "original_language": "nb-NO",
    "record_domain": "legal-entity-register"
  },
  "access": {
    "mode": "official_public_api",
    "endpoint": "https://data.brreg.no/enhetsregisteret/api/enheter",
    "authentication": "none",
    "terms_url": "https://data.brreg.no/enhetsregisteret/api/dokumentasjon/en/index.html",
    "license_url": "https://data.norge.no/nlod/en/2.0",
    "observed_at": "2026-08-23T10:02:18.590Z"
  },
  "classification": {
    "public_record": true,
    "personal_data": "present",
    "sensitive_personal_data": "unknown",
    "important_data": "not_designated",
    "state_secret": "absent",
    "controlled_technology": "not_identified",
    "basis": [
      "The official API documentation identifies the entity-register data as NLOD 2.0 licensed.",
      "NLOD 2.0 permits copying, use, modification, combination, and distribution, including commercial use, with attribution and change disclosure.",
      "NLOD 2.0 excludes personal data without a lawful basis; the product projection excludes roles, contacts, and street address lines."
    ],
    "status": "VERIFIED_WITH_RESTRICTIONS"
  },
  "operations": {
    "retrieve": {
      "status": "allowed",
      "basis": "The official entity API is public and documents unauthenticated use."
    },
    "normalize": {
      "status": "allowed",
      "basis": "NLOD 2.0 permits modification and combination with attribution and change disclosure."
    },
    "translate": {
      "status": "allowed",
      "basis": "NLOD 2.0 permits modification; CivicDataForge preserves Norwegian source strings and labels derived translations."
    },
    "cache": {
      "status": "allowed",
      "basis": "NLOD 2.0 permits copying and use subject to its conditions."
    },
    "redistribute": {
      "status": "allowed",
      "basis": "NLOD 2.0 permits distribution subject to attribution, change disclosure, and excluded-rights boundaries."
    },
    "commercial_use": {
      "status": "allowed",
      "basis": "NLOD 2.0 grants use for any purpose subject to its conditions and exclusions."
    },
    "cross_border_transfer": {
      "status": "allowed",
      "basis": "NLOD 2.0 is worldwide; personal-data and third-party-rights safeguards still apply."
    }
  },
  "transfer": {
    "allowed_destinations": [
      "*"
    ],
    "blocked_destinations": [],
    "allowed_recipient_classes": [
      "commercial",
      "government",
      "research",
      "nonprofit",
      "individual"
    ],
    "required_safeguards": [
      "attribute Brønnøysundregistrene and link the source and NLOD 2.0 where practical",
      "disclose CivicDataForge field selection, minimization, and stable-key transformations",
      "exclude roles, direct contacts, and street address lines from the default product projection",
      "do not convert registry facts into KYC, sanctions, procurement, credit, solvency, or eligibility verdicts"
    ],
    "expires_at": null
  },
  "evidence": [
    {
      "kind": "official_statement",
      "url": "https://data.brreg.no/enhetsregisteret/api/dokumentasjon/en/index.html",
      "observed_at": "2026-08-23T10:02:18.590Z",
      "sha256": "sha256:dd857144bf1a5efcd91c86b54a68eb3657f70e4e7f3d4edd77324d5aa1a4fd3b"
    },
    {
      "kind": "license",
      "url": "https://data.norge.no/nlod/en/2.0",
      "observed_at": "2026-08-23T10:02:18.590Z",
      "sha256": "sha256:8c9abba2b7498f057e3f78bcf4a41d9c7328b12e5bd08ff85b274d18cc0d0862"
    }
  ],
  "review": {
    "status": "VERIFIED_FOR_RECORDED_SCOPE",
    "reviewed_at": "2026-08-23T10:02:18.590Z",
    "reviewer_class": "technical_review",
    "limitations": [
      "Technical source and licence review only; not legal advice.",
      "The recorded permission applies to the minimized entity projection and does not override privacy, third-party rights, or destination law."
    ]
  },
  "passport_receipt_hash": "sha256:3a6c514c67bcde77a966fb394e71b88cce19c47d540fdd089f61e6ce62ce031e"
}