- Enforcing jurisdiction
- Iceland · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
DPA case 2020010604 – Dismissed (Iceland, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
An Icelandic DPA dismissed a complaint against Lögheimtun and Creditinfo Lánstraust for sharing a person's financial information. The ruling confirmed that the sharing was not allowed due to a missed deadline for objections.
What happened
The DPA dismissed a complaint about Lögheimtun sharing a person's financial information with Creditinfo Lánstraust.
Who was affected
A complainant whose personal financial information was shared without proper authorization.
What the authority found
The DPA ruled that Lögheimtun was not allowed to disclose the complainant's information due to procedural issues.
Why this matters
This decision highlights the importance of following legal procedures when handling personal data. Companies should ensure they have the right to share information before doing so.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 18 October 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
On March 26, 2019, the DPA received complaint regarding the processing of personal information about a complainant by Lögheimtun and Creditinfo Lánstrausti. The complain concerned the brokerage of the complainant's personal information by Lögheimtun to the financial information agency Creditinfo Lánstraust and the listing of Creditinfo Lánstraust of the complainant's financial information in the default register, despite the fact that she had sent her objections to the financial information office within the stated deadline. The complainant based her complaint on the fact that Lögheimtun ehf. was not permitted to share her personal information with Creditinfo Lánstraust hf. for the purpose of having it registered on the default register and that Creditinfo Lánstrausti hf. was not allowed to register the complainant on the default register according to the request of Lögheimtun ehf. The Icelandic DPA held thatt Lögheimtun ehf. was not permitted to disclose personal information about the complainant from the judgment of the District Court to Creditinfo Lánstraust hf. when the appeal deadline had not expired. Additionally, Creditinfo Lánstrausti hf. was not permitted to register and have information on the complainant's claim in its default register.
Outcome
Dismissed
The complaint or investigation was dismissed.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case 2020010604 in IS
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. DPA case 2020010604 - Iceland (2021). Retrieved from cookiefines.eu
Last updated: