Surveillance and Privacy in Iceland
Reviewed by the Commoner Law Editorial Team. Sourced from Icelandic Acts of the Althingi, statutory instruments, and official guidance. Written in plain language for general understanding — this is educational content, not legal advice. Our editorial standards
What is this right?
Iceland's Constitution provides strong privacy protections against surveillance:
- Article 71: Examination of telephone and other communications may only occur pursuant to a judicial decision or statutory provision.
- The Criminal Procedure Act classifies telephone interception (wiretapping) as a coercive measure requiring court authorisation.
- The constitutional protection is broadly worded to cover modern surveillance methods — not just telephone.
- Iceland has data protection regulations aligned with EEA/GDPR principles, enforced by the Data Protection Authority (Persónuvernd).
When does it apply?
- Police or government authorities seek to monitor your communications, online activity, or movements.
- Any entity (public or private) collects, stores, or processes your personal data.
What to Do If You Suspect Unlawful Surveillance or a Privacy Violation in Iceland
- If you suspect unlawful surveillance, consult a lawyer — you can challenge its legality in court.
- For data protection concerns, file a complaint with Persónuvernd (the Data Protection Authority).
- Under GDPR-aligned rules, you have rights to access, rectification, and erasure of your personal data.
What should you NOT do?
- Don't assume police can freely monitor your communications — a court order is required.
- Don't ignore data breach notifications — if a company notifies you of a breach, take protective action.
Common Questions
Can Icelandic police listen to my phone calls?
Only with a court order. Under Article 71 of the Constitution, examination of telephone and other communications may only occur pursuant to a judicial decision or statutory provision. The Criminal Procedure Act (Lög nr. 88/2008) classifies wiretapping as a coercive measure requiring court authorisation. The protection is broadly worded to cover modern surveillance methods, not just telephone.
Does Iceland have GDPR-style data protection?
Yes. Iceland has data protection regulations aligned with EEA/GDPR principles, enforced by the Data Protection Authority (Persónuvernd). You have rights to access, rectification, and erasure of your personal data. File complaints about unlawful data processing with Persónuvernd. Don't ignore data breach notifications — if a company notifies you of a breach, take protective action.
What if I think I'm under unlawful surveillance in Iceland?
Consult a lawyer — you can challenge its legality in court. Don't assume police can freely monitor your communications; a court order is required. For data protection concerns about any entity that collects, stores, or processes personal data, file a complaint with Persónuvernd. Constitutional protections under Article 71 apply to all persons in Iceland, not only citizens.
When does it apply — surveillance and privacy?
Police or government authorities seek to monitor your communications, online activity, or movements.Any entity (public or private) collects, stores, or processes your personal data.
What should I do if I think the police or a company is monitoring my communications without authorisation in Iceland?
If you suspect unlawful surveillance, consult a lawyer — you can challenge its legality in court.For data protection concerns, file a complaint with Persónuvernd (the Data Protection Authority).Under GDPR-aligned rules, you have rights to access, rectification, and erasure of your personal data.
What should you NOT do — surveillance and privacy?
Don't assume police can freely monitor your communications — a court order is required.Don't ignore data breach notifications — if a company notifies you of a breach, take protective action.