Updated State Data Security Classification

Version 1.2 of the data security classification of the Icelandic government has been published. Version 1.0 was published in October 2022. Since the first edition, the classification has been reviewed and improved. The main changes are as follows:

• The classification of data was reviewed and revised in consultation with stakeholders, including information systems operators and parties involved in national security.

• Summary in English added

• The definition of restricted data (highest category) was improved and clarified, for example, in the context of the Regulation on the Protection of Classified Information (No. 959/2012).

• Consequences between specially protected and resricted data were also reviewed and differentiation between them increased.

• The criteria for security control was reviewed and improved.

• General wording was revised to make it more accessible to readers and to reduce any potential inconsistencies.

The data security classification is used by the public sector to ensure the security of information on individuals and legal entities. The classification directly affects how cloud services are used and thus where public data may be stored.

The Department of Management and Reform at the Ministry of Finance and Economic Affairs can provide further information on the classification.

Data Security Classification of the Icelandic government May 2023.

More about the State's security classification.

The Office of Management and Reform at the Ministry of Finance and Economic Affairs shall provide further information.