Skip to Primary Navigation

Iceland’s DPA signals continued focus on cybersecurity, health data, and AI governance

Harpa Concert Hall and Conference Centre in Reykjavik, Iceland
Photo: Athanasios Gioumpasis/Getty Images

Persónuvernd’s annual report for 2025 shows an increasingly proactive approach to cybersecurity failings, AI oversight, and organizations handling sensitive data.

“It has been claimed that more technological advances will take place in 2025 than in any other year.” This is the opening sentence in the annual report for 2025 from Persónuvernd, the Icelandic Data Protection Authority (DPA).

In a year that brought a lot of quick-paced technological changes as well as