Persónuverndarmanninn

Persónuverndarmanninn, meaning "data protection officer" in Icelandic, is a role created by the General Data Protection Regulation (GDPR) to ensure that organizations handle personal data in a secure and transparent manner. In 2018, Iceland passed legislation requiring organizations to appoint a data protection officer, making it one of the first countries to do so.

The role of the Persónuverndarmanninn involves ensuring that personal data is protected from unauthorized access, disclosure, alteration, or destruction. This includes carrying out data protection impact assessments, notifying supervisory authorities of personal data breaches, and cooperating with supervisory authorities to ensure compliance with data protection regulations.

Persónuverndarmanninn is responsible for advising their organization on data protection matters, ensuring that staff are trained and aware of data protection requirements, and ensuring that data protection policies and procedures are in place. They may also be involved in data protection audits and investigations.

In Iceland, the Law on Personal Data 30/2018 established the Office of the Personal Data Protection Authority, which is responsible for overseeing data protection regulation and enforcing data protection laws. The Office is headed by the National commissioner who is also responsible for appointing and overseeing the work of data protection officers.

Organizations are required to disclose the name and full contact details of their Persónuverndarmanninn to the Data Protection Authority and make them available to the public. This transparency requirement is seen as a way to increase trust and confidence in data protection measures.