DPA case 2020010609 – Dismissed (Iceland, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A complaint about not being able to access personal information in the Schengen Information System was dismissed by the Icelandic Data Protection Authority. This case highlights the challenges individuals face when trying to access their personal data and the importance of clear communication from authorities.
What happened
A complaint was filed regarding a refusal to grant access to personal information in the Schengen Information System.
Who was affected
The complainant, who had applied for international protection in Iceland and was later ordered to leave the country.
What the authority found
The authority found no violations in this case and dismissed the complaint.
Why this matters
This dismissal shows the complexities involved in accessing personal data held by authorities. It emphasizes the need for clear guidelines on how individuals can obtain their information.
Source checks
Secondary-source text retrieved.
Automated check recorded — 18 October 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
On 13 January 2020, the DPA received a complaint about a refusal to grant access to personal information registered in the Schengen Information System (SIS). The background to the case is that in 2017 the complainant had come to Iceland and submitted an application for international protection. The complainant later withdrew that application by notification and was subsequently ordered to leave the country within the prescribed seven-day deadline. The complainant did not do so and was therefore subsequently escorted out of the country on 7 November 2017. As the complainant had not left the country within the prescribed time limit, he was placed under a two-year return ban to Iceland. On 14 October 2019, the complainant sent an access request to the Office of the National Commissioner of Police on registrations concerning him in the SIS, as well as a request that such information be deleted. The complainant was answered that the information in question was not delivered by e-mail, but that the data subject was required to come in person to the police or to the nearest Schengen State Embassy. The complaint sent a letter to the Swedish Embassy, and was instructed to send his request for information to the embassy of the same country in northern Macedonia. The embassy responded that it was not visible that he was registered in SIS and that he should go to the country that submitted the registration, ie. Iceland. The complainant sent a letter to the Icelandic consul in Albania but received the answer that the consul was not involved in the issuance of visas. The complainant contacted the German embassy by e-mail on 18 November 2019. The embassy could not confirm whether he was under a re-entry ban in Germany or in the Schengen area. Finally, the complainant sent an e-mail to the office of the National Commissioner of Police, dated 13 January 2020, reiterating the demand for the deletion of personal data. According to the Police, the registration in question was
Outcome
Dismissed
The complaint or investigation was dismissed.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case 2020010609 in IS
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. DPA case 2020010609 - Iceland (2021). Retrieved from cookiefines.eu
Last updated: