Overview
Tips about possible violations or a general inquiry, can be sent to postur@personuvernd.is.
The Data Protection Authority rules on complaints about the processing of personal data. Only courts rule on damages for the processing of personal data.
Who can complain?
Individuals can make a complaint if they believe that data protection legislation has been violated in the processing of their personal data.
Parents and guardians can complain on behalf of their children.
Individuals cannot complain about the processing of personal data about other individuals unless thei have a
Institutions, organizations or associations can lodge a complaint without a certified authorization, subject to certain conditions.
Before sending a complaint
Before the complaint process is started, it is good to have all the supporting documents that is intended to submit with the complaint available.
Before filling out the complaint form, the following must be considered:
The complaint must be addressed to a specified party.
The complaint must be reasoned.
No anonymous complaints can be submitted – the party that is complained about will receive a copy of the complaint and other evidence.
Process time
In general, it can be estimated that the processing of cases can take about 18 months. The processing time can be extended if cases are complicated or of high scope.
More about the processing time at Data Protection Authority.
Complaint dismissed
If the same dispute is being handled by the courts or other government authorities, a case will not be handled at the same time by the Data Protection Authority.