Persónuvernd
-

Iceland’s DPA signals continued focus on cybersecurity, health data, and AI governance
Persónuvernd’s annual report for 2025 shows an increasingly proactive approach to cybersecurity failings, AI oversight, and organizations handling sensitive data.
-

Icelandic DPA fines health care system IKr 5m for unlawful data processing
Institution failed to ensure that the mergers of healthcare records were authorized.
-

Fine for ‘abusive’ monitoring of Icelandic Subway employee
“Fear of running out of bread” claimed as one reason for video surveillance of staff.
