persónuverndarráðstafana

Persónuverndarráðstafana refers to measures taken to protect personal data. In Iceland, these measures are primarily governed by the Act on the Protection of Privacy and Processing of Personal Data, which aligns with the General Data Protection Regulation (GDPR) of the European Union. The core principle is to ensure that individuals' personal information is handled lawfully, fairly, and transparently.

These measures encompass a wide range of practices and technical solutions. Organizations are required to implement appropriate technical and organizational safeguards to prevent unauthorized access, disclosure, alteration, or destruction of personal data. This can include encryption, access controls, regular security audits, and staff training.

Key aspects of persónuverndarráðstafana include obtaining consent for data processing, informing individuals about how their data will be used, and allowing them to access, rectify, or erase their personal information. Data minimization, processing only data that is necessary for a specific purpose, is also a crucial element. Furthermore, organizations must conduct data protection impact assessments for high-risk processing activities and report data breaches to the relevant supervisory authority without undue delay. The goal is to foster trust and provide individuals with control over their digital identity.