I've been doing quite a bit of research into European accessibility legislation, so this write-up from Bogdan on the subtle differences in the WAD between Norway and the EU was very useful.

The basic gist is: Norway has only implemented parts of the upcoming EAA, specifically those covering the web, mobile applications, and digital documents, but those parts are already live (as of 2021). This simplifies conformance in that it means you only have to worry about WCAG 2.1 AA criteria, with a few exceptions:

• 1.2.3 Audio Description or Media Alternative (Prerecorded) (Level A);
• 1.2.4 Captions (Live);
• 1.2.5 Audio Description (Prerecorded) (Level AA) ⬅ though note that this will be required from 2024 for public sector services, except schools.

In fact, technically, private sector businesses only need to meet WCAG 2.0 AA (another departure from the broader EU rules), and internal or business tools are not covered, including commercial tools such as CMSes and CRMs:

Professional systems that you only have access to as employee of the business are not covered.

On how the exceptions don't really matter; 2.1 AA is still the target:

In my experience with organizations from both sectors WCAG 2.1 on A and AA levels is the actual target already now.