persónuupplýsingalögum
Persónuupplýsingalög refer to the Icelandic legislation governing the processing of personal data, with the aim of protecting privacy and the fundamental rights of individuals. The rules operate in harmony with the European Union’s General Data Protection Regulation (GDPR), reflecting Iceland’s participation in the European Economic Area. The main provisions cover the collection, storage, use, disclosure and transfer of personal data, as well as the conditions under which data may be processed.
Key concepts in the laws include data controllers and data processors, who are responsible for ensuring that
The legislation emphasizes transparency through privacy notices, and requires data protection by design and by default,
Transfers of personal data to third countries are restricted unless the recipient provides adequate protections or