- Enforcing jurisdiction
- Iceland · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
DPA case 2020031337 – Dismissed (Iceland, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Landsnet, a public institution in Iceland, was cleared by the Data Protection Authority after a job applicant asked for his personal data to be deleted. The authority found that Landsnet was allowed to keep this information based on local laws. This decision highlights the importance of understanding how public institutions handle personal data requests.
What happened
The Data Protection Authority dismissed a complaint regarding Landsnet's refusal to delete a job applicant's personal data.
Who was affected
The person who applied for a job at Landsnet and requested the deletion of his personal data.
What the authority found
The authority ruled that Landsnet was authorized to retain the applicant's personal information under Icelandic law.
Why this matters
This case shows that public institutions can retain personal data even after job applications end, as long as they follow specific legal guidelines. It reminds individuals to be aware of their rights regarding data deletion.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 18 October 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The DPA received a complaint regarding the processing of personal information by Landsnet, a public institution. The complainant unsuccessfully applied for a job with Landsnet. After the application process ended, he requested his personal data at Landsnet to be deleted. Landsnet rejected his request on the grounds that on the basis of Act no. 77/2014 on public archives, it was not permitted to discard any document in the company's archives except on the basis of an approval of a national archivist, the rules of the National Archives of Iceland or on the basis of a special legal provision. The DPA dismissed the part of the complaint concerning the rejection of the complainant's request for the deletion of personal information and decided only on Landsnet's authorization to retain the information. In the opinion of the DPA, the storage of complainant's personal information by Landsnet can take place on the basis of the Act no. 44/2014, Coll. 3. tölul, Paragraph 1 Article 9 Act no. 90/2018 and point c of the first paragraph, and Article 6 Regulation (EU) 2016/679. In addition to the authorization according to the above, the processing of personal information must satisfy all the basic requirements of the first paragraph. . In the opinion of the Data Protection Authority, it cannot be seen that the processing of personal information by Landsnet was in conflict with the basic requirements of Article 8. Act no. 90/2018 and Article 5. Regulation (EU) 2016/679. The DPA concluded that Landsnet's retention of personal information about the complainant was in accordance with Act no. 90/2018.
Outcome
Dismissed
The complaint or investigation was dismissed.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case 2020031337 in IS
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. DPA case 2020031337 - Iceland (2021). Retrieved from cookiefines.eu
Last updated: