Data Protection Authority
Processing personal information by category
The Data Protection Authority's guidance on Data Protection is divided into categories. It can be found on the Island.is centralised service portal.
Data protection law and key concepts
The Data Protection Act states how organizations, companies and the government may work with personal data of individuals.
Rights of the data subject
Individuals enjoy various rights regarding the processing of personal data.
Obligations of controllers and processors
Before the processing of personal data begins, it is necessary to define who is considered the controller of the processing, whether there is a joint controller and whether it is possible to enter into a contractual relationship with the processor or even a subprocessor, as appropriate.
Children and privacy
Children's privacy is specially protected. Information on childrens personal data in schools, sports and leisure clubs, distance learning, marketing towards children.
The cloud
The Data Protection Act applies to the processing of data in the cloud.
Collection of signatures
Collecting signatures on the Internet is considered the processing of personal information that falls under the scope of the Data Protection Act.
Data protection impact assessment and prior consultation
Sometimes there is a need to do a so-called data protection impact assessment and if the outcome of that is a specific way there might be a duty to ask for a prior-consultation with the Data Protection Authority.
Online expression and media coverage
Online postings, social media communications and media coverage
Financial information
Information on default register and credit rating, alternative payments in home banking, publication of income information
Health data
Rules regarding information in medical records and participation in scientific research.
Marketing and National Registries ban lists
Marketing, the National Register's ban list and personal protection
Privacy in the workplace
Employment and contracts, emails, tachographs, processing of personal information at the workplace, electronic IDs.
Schengen databases
Schengen databases and where you can request information from them.
Security of personal data and data breaches
Information on security of personal data and data breaches
Service- and repair history of cars
By sharing information about the service and repair history of cars, the processing of personal information can take place, which must be based on legal grounds according to data protection legislation.
Use of identification numbers
The Data Protection Act states that the use of identification numbers is only permitted if it has a legitimate purpose and is necessary to ensure secure identification.