Ask Reggi Your Question Now
Can you summarize Data protection and the Processing of Personal Data Law No.90/2018 (in English)?
Iceland Laws - Others > Data protection and the Processing of Personal Data Law No.90/2018 (in English)
Short Summary
The Data Protection and the Processing of Personal Data Law No.90/2018 is an Icelandic law that governs the protection and processing of personal data. The objective of the Act is to ensure that personal data is treated in accordance with fundamental principles and rules on data protection. The Act incorporates the provisions of Regulation (EU) 2016/679 (General Data Protection Regulation) into Icelandic law. It applies to the processing of personal data by automated means or by non-automated means that form part of a filing system. The Act does not apply to personal data used for private purposes or personal data processed by the judiciary, the Althingi, investigative bodies, or the State for certain purposes. The Act establishes the Data Protection Authority as the supervisory authority responsible for monitoring the implementation of the Regulation and the Act. It also defines various terms related to data protection and outlines the rights of data subjects, obligations of controllers and processors, and requirements for data protection impact assessments and authorizations.
Whom does it apply to?
All entities involved in the processing of personal data in Iceland, including controllers and processors
What does it govern?
Data protection and the processing of personal data
What are exemptions?
The Act does not apply to the processing of personal data by the judiciary, the Althingi and its bodies, investigative bodies, and the State in relation to the prevention, investigation, detection, or prosecution of criminal offenses or the execution of criminal penalties
What are the Penalties?
Penalties for non-compliance with the Act are not specified in the provided document
Jurisdiction
Iceland