Persónuverndarráðið

Persónuverndarráðið is the Data Protection Authority of Iceland. Its primary role is to oversee and enforce the provisions of the General Data Protection Regulation (GDPR) within Iceland, as well as national data protection legislation. The council is responsible for ensuring that individuals' personal data is processed lawfully, fairly, and transparently.

The Persónuverndarráðið handles complaints from individuals who believe their data protection rights have been violated. It also conducts investigations into organizations suspected of non-compliance with data protection laws. The authority has the power to issue warnings, impose fines, and order corrective measures to ensure that data is processed in accordance with legal requirements.

Furthermore, the Persónuverndarráðið provides guidance and advice to both individuals and organizations on data protection matters. It aims to promote a culture of data protection awareness and best practices across Iceland. The council plays a crucial role in safeguarding privacy and upholding fundamental rights in the digital age. Its work is essential for building trust in how personal data is handled by businesses, public authorities, and other entities.