Data Privacy & Digital Rights
Iceland (EEA) operates under GDPR-equivalent rules via Lög nr. 90/2018. Persónuvernd enforces. Penal Code §229 criminalises non-consensual sharing of intimate imagery.
Covered in this guide:
Iceland's data-protection framework is Lög nr. 90/2018 um persónuvernd og vinnslu persónuupplýsinga — GDPR-equivalent for EEA Iceland. Regulator: Persónuvernd at personuvernd.is. For NCII, Almenn hegningarlög §229 criminalises non-consensual sharing of intimate imagery — penalties up to 4 years' imprisonment for aggravated cases.
Key Laws
Lög nr. 90/2018 um persónuvernd og vinnslu persónuupplýsinga
Lög nr. 90/2018 — GDPR-equivalent for EEA Iceland
Iceland's GDPR-equivalent. Data-subject rights of access, rectification, erasure, restriction, portability, objection. Regulator: Persónuvernd.
Almenn hegningarlög §229 (privacy / image-based abuse)
Lög nr. 19/1940 §229
Criminalises non-consensual sharing of intimate imagery. Penalties up to 4 years' imprisonment for aggravated cases.
Removing Non-Consensual Intimate Imagery (NCII)
NCII in Iceland is criminal under Almenn hegningarlög §229 — up to 4 years' imprisonment for aggravated cases. Investigation: Lögreglan. Technical takedown: StopNCII.org (18+) and NCMEC takeitdown (un...
Your Rights Under Lög nr. 90/2018 (Iceland GDPR-equivalent)
Iceland operates under Lög nr. 90/2018 — Iceland's GDPR-equivalent for EEA. Same data-subject rights as GDPR. Regulator: Persónuvernd at personuvernd.is.
Cyberstalking and Online Harassment in Iceland
Online harassment in Iceland falls under Almenn hegningarlög: §228 (defamation), §229 (privacy / image-based abuse), §233 (threats). Investigation: Lögreglan.