In times of crisis, emerging technology can pose major challenges for regulators. They must deal with great uncertainty and urgency related to both the crisis and the technology. To understand such situations, this article studies the revelatory case of privacy regulation of a contact-tracing application called Smittestopp, created in Norway during the COVID-19 crisis. Based on public and organizational documents and 48 interviews, the analysis shows that the Norwegian Data Protection Authority faced several options for regulatory intervention throughout the crisis, and adapted its approach based on intra-crisis experience, regulatees' responses, and different levels of uncertainty and urgency. Building on these findings, the study formulates propositions regarding the regulation of emerging technology during a crisis and regulatory agencies' use of rule-based, idea-based, and norm-based interventions. This study provides insight into how these three types of intervention relate to different aspects of a crisis situation. Furthermore, it stresses the importance of idea-based intervention as a key site of analysis in studying technology that emerges during a crisis.

中文翻译：

---

在危机时期监管新兴技术：在 COVID-19 大流行期间挪威的数字接触者追踪

在危机时期，新兴技术可能会给监管机构带来重大挑战。他们必须应对与危机和技术相关的巨大不确定性和紧迫性。为了了解这种情况，本文研究了在 COVID-19 危机期间在挪威创建的名为 Smittestopp 的联系人追踪应用程序的隐私监管的启示性案例。根据公开和组织文件以及 48 次访谈，分析表明，挪威数据保护局在整个危机期间面临多种监管干预选择，并根据危机内的经验、监管者的反应以及不同程度的不确定性和紧迫性。基于这些发现，该研究提出了有关在危机期间监管新兴技术以及监管机构使用基于规则、基于理念和基于规范的干预措施的主张。本研究提供了有关这三种类型的干预如何与危机情况的不同方面相关的见解。此外，它强调了基于想法的干预作为研究危机期间出现的技术的关键分析站点的重要性。