Enforcing jurisdiction
Iceland · Geography does not establish applicable law.
Confirmed applicable legislation

Icelandic National Police – Violation Found (Iceland, 2021)

Violation Found
Persónuvernd10 March 2021Iceland
final
Violation Found

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

The Icelandic National Police faced scrutiny for using Facebook to gather information related to law enforcement. This investigation shows that even police must follow strict rules when handling personal data.

What happened

The police requested information via Facebook for law enforcement purposes.

Who was affected

Individuals whose information was processed by the police were affected.

What the authority found

The authority concluded that the police's processing of personal data must comply with legal principles for law enforcement.

Why this matters

This finding highlights the need for all organizations, including law enforcement, to ensure their data processing practices are lawful and fair. It serves as a reminder for businesses to be cautious about how they gather and use personal information.

Recorded legal citations
Automatically processed
Art. 44 GDPR
View original scraped data
Art. 44(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

National Law Articles
AI-identified
Act no. 75/2019 on the processing of personal information for law enforcement purposes

Source checks

Linked-source text retrieved.

Automated check recorded — 19 March 2026.

Processing notes: national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

On the occasion of a news report, the office of the chief of police in the capital area requested information and suggestions via the social media Facebook. Following this event, the DPA started an investigation into whether such processing complied with Act no. 75/2019 on the processing of personal data for law enforcement purposes. The DPA asked the office questions concerning processing data via Facebook by the police and then considered received answers. The DPA held that all processing of personal data for law enforcement purposes must comply with the principles set out in Article 4. Act no. 75/2019. It states that in the processing of personal data for law enforcement purposes, care shall be taken to ensure that it is processed in a lawful and fair manner, that the processing is necessary for the competent authority for law enforcement purposes, that information is obtained for clearly stated, lawful and objective purposes and not further processed. In addition, the processing of sensitive personal data must comply with one of the additional conditions of the first paragraph, following Article 6 Act no. 75/2019. As such, personal information was processed in accordance with the role of the police according to the second paragraph of Article 1 Police Act no. 90/1996. The police keeps a register of complaints they receive about crimes with all the necessary information concerning cases, a diary with information about complaints and their resolution, a list of arrested persons and other files necessary for law enforcement interests to avert imminent danger or deterrence. we commit crimes. In view of the above, the DPA considered that the processing of personal information for the purpose in question is generally permitted, provided that it is carried out in accordance with the provisions of the previously cited law. At the same time, however, the DPA considered Article 14 of Act no. 75/2019, which states that the storage of personal information should be in a

Outcome

Violation Found

The DPA found a violation but did not impose a fine.

Related Enforcement Actions (0)

No other enforcement actions found for Icelandic National Police in IS

This is the only recorded action for this entity in this jurisdiction.

Details

Decision Date

10 March 2021

Authority

Persónuvernd

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Icelandic National Police - Iceland (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: