Gagnaskipti

Gagnaskipti is the exchange of information or data between two or more parties, often across organizational or system boundaries. It covers the collection, transfer, and use of data to support shared objectives, such as delivering public services, enabling research, or improving business processes. In information technology, gagnaskipti is typically implemented through data interfaces, such as application programming interfaces (APIs), data feeds, file transfers, or federated query systems, and relies on common data formats and metadata to foster interoperability and data quality.

The practice is governed by legal and ethical frameworks that vary by sector and jurisdiction. In Iceland and the wider European Economic Area, data exchange is subject to data protection rules, including principles of consent, purpose limitation, data minimization, and security safeguards. Sector-specific regulations may also apply, for example in healthcare, taxation, or education. Data governance—covering ownership, stewardship, access rights, and data lineage—plays a central role in managing gagnaskipti responsibly.

Models of data exchange include bilateral sharing between parties, centralized data repositories, and federated or data-market approaches where data remains under the control of its owner while being discoverable and queryable by others. Security and privacy risks, such as unauthorized access or data breaches, are mitigated through encryption, authentication, access controls, auditing, and, where appropriate, data anonymization or pseudonymization.

Benefits of gagnaskipti include enhanced services, efficiency, evidence-based decision making, and new research insights, while challenges include ensuring data quality, maintaining trust, and navigating legal constraints.