Patients have a statutory right to access their own health information, including bidediagnostic data, cf. the Patient and User Rights Act § 5-1 and the General Data Protection Regulation (GDPR) article 15. Helse Sør-Øst currently mainly delivers image data via CD/DVD and in some cases USB flash drives. This system is resource demanding for both patients and health trusts, involves challenges connected to physical distribution and information security, and is not in line with developments against digital disclosure of personal data. The Norwegian Data Protection Authority has pointed out that CD/DVD can no longer be seen as a "normal electronic form" in accordance with GDPR article 15 no. 3.