A web cookie is a small text file, stored on a computer or other smart device when a user visits a website.
When cookies are used on a website, the users of the site must be informed that the processing of personal data is done on them using cookies and for what purpose.
The Electronic Communications Office of Iceland monitors when cookies are used to gain access to information about users, collect hidden information about them or monitor their activities. The Authority's supervision concerns whether these processing operations are authorized, such as on the basis of consent, and whether users are notified.
However, the Data Protection Authority supervises the subsequent processing of personal data obtained through the use of cookies. This applies, for example, to the processing of the creation of a personal profile of individuals based on information obtained through cookies.
Data Protection Authority also monitors other rules of the data protection legislation in relation to the processing of personal data carried out by web cookies, including for the processing operations that are subject to the control of the Communications Office, such as information security and rights of individuals.
