Data Security & Breach Notification
Act on Data Protection and the Processing of Personal Data No. 90/2018 — GDPR breach notification as incorporated into Icelandic law
GDPR Arts. 33-34 (Iceland)
Iceland · July 15, 2018
Verify detailsAs in Norway, the GDPR breach articles apply in Iceland as national law through the EEA Agreement, with the same 72-hour authority deadline and the same high-risk trigger for notifying individuals. The supervisory authority is Personuvernd. Marked 'check' for the same reason as the Norwegian entry: the incorporation is well established, but the national procedural detail was not read in the Icelandic original.
Act No. 90/2018, incorporating Regulation (EU) 2016/679, Arts. 33-34 via the EEA AgreementRead regulation →
This is a general reference, not legal advice or a determination that this law applies to your specific business. Run the full questionnaire to check against your actual presence, activities, and data types.