Persónuupplýsingaskrá

Persónuupplýsingaskrá is an Icelandic term that translates to "personal data register" or "personal information register." It refers to a collection of personal data that is processed in a systematic way, either manually or using automated means. This concept is central to data protection regulations in Iceland, aligning with the principles of the General Data Protection Regulation (GDPR) of the European Union.

A persónuupplýsingaskrá can encompass a wide range of information about identifiable individuals. This includes details such as names, addresses, contact information, identification numbers, and any other data that can directly or indirectly identify a person. The purpose of such a register is usually to manage specific tasks, such as employee records, customer databases, or membership lists for organizations.

Under Icelandic data protection law, organizations that maintain a persónuupplýsingaskrá have specific obligations. These include ensuring the data is processed lawfully, fairly, and transparently. Individuals have rights regarding their personal data held within these registers, such as the right to access, rectify, or erase their information. The Data Protection Authority (Persónuvernd) oversees the implementation and enforcement of these regulations in Iceland, ensuring that personal data is handled responsibly and in accordance with legal requirements.