tölvunefnd

Tölvunefnd is the Icelandic Data Protection Authority. It is an independent government body responsible for overseeing the implementation and enforcement of data protection laws in Iceland, primarily the General Data Protection Regulation (GDPR) as incorporated into Icelandic law.

The primary mission of Tölvunefnd is to protect individuals' privacy rights in relation to the processing of their personal data. This involves ensuring that organizations, both public and private, handle personal information in a lawful, fair, and transparent manner. The authority provides guidance and information to both individuals and organizations on data protection matters.

Tölvunefnd has a range of powers to fulfill its mandate. These include investigating complaints from individuals who believe their data protection rights have been violated, conducting audits and inspections of organizations' data processing activities, and imposing sanctions for non-compliance. Sanctions can include warnings, reprimands, and significant fines. The authority also plays a role in advising the government on data protection legislation and contributing to the development of policies in this area. Its work is crucial in maintaining trust in how personal data is handled within Iceland and in alignment with European Union standards.