- Enforcing jurisdiction
- Iceland · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
DPA case Mál nr. 2020010601 – Complaint Upheld (Iceland, 2020)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The Persónuvernd upheld a complaint against the National Commissioner of Police for denying access to information about who accessed a person's data. The authority found that while some information requests were rightly denied, others were not. This ruling emphasizes the importance of transparency in how personal data is handled.
What happened
The National Commissioner of Police refused a request for information about employees who accessed a complainant's personal data.
Who was affected
The complainant who sought access to information regarding their personal data and who accessed it.
What the authority found
The authority found that the refusal to disclose information about searches by police employees was partly legitimate, but some denials were not.
Why this matters
This decision reinforces the need for public authorities to be transparent about data access. Individuals have rights to know how their data is being used, which can impact how organizations manage data requests.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 18 October 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The complainant requested the police to give access to information on the employees who looked up his personal information in the Office's electronic case file system and on searches of other responsible parties needs. These requested where refused. Is the refusal of the request to access information on the employees who looked up personal data in the Office´s electronic case file system and on other responsible parties in accordance with applicable law? The decision of the National Commissioner of Police to refuse information on the employees who looked up his personal information in the Office's electronic case file system, on the timing of searches, as well as on their number, was legitimate. The decision of the National Commissioner of Police to refuse information on searches of other responsible parties in the Office's electronic case file system, as well as on the purpose of its own searches, was not legitimate. The procedure of the National Commissioner of Police in processing a request for information on the processing of his personal information was in accordance with applicable law.
Outcome
Complaint Upheld
A data subject complaint that was upheld by the DPA.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case Mál nr. 2020010601 in IS
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. DPA case Mál nr. 2020010601 - Iceland (2020). Retrieved from cookiefines.eu
Last updated: