persónuverndarráðinu

Persónuverndarráðið is the Icelandic Data Protection Authority. It is an independent public institution responsible for overseeing the implementation and enforcement of data protection laws in Iceland, primarily the General Data Protection Regulation (GDPR) of the European Union, which has been incorporated into Icelandic law. The authority's main objective is to protect individuals' privacy rights concerning the processing of their personal data.

The Persónuverndarráðið investigates complaints from individuals regarding alleged breaches of data protection regulations. It also has the power to conduct audits and inspections of organizations that process personal data to ensure compliance. Where violations are found, the authority can issue warnings, reprimands, and impose significant fines.

Beyond its enforcement role, the Persónuverndarráðið provides guidance and advice to both individuals and organizations on data protection matters. It works to raise awareness about data protection rights and obligations and offers information through its website and public outreach. The authority plays a crucial role in fostering trust in the digital environment by ensuring that personal data is handled responsibly and lawfully. It is composed of a director and staff members with expertise in data protection law and technology.