Persónuvernd
Data protection authority of Iceland
Total Actions
65
Total Fines
€1.2M
Average Fine
€42K
Among actions with fines
Enforcement Factor
1.10
Measured
About Persónuvernd
The Persónuvernd is Iceland's data protection authority responsible for enforcing GDPR and data-protection compliance. Persónuvernd has taken 65 enforcement actions resulting in €1,187,887 in total penalties, with an average fine of €42K per sanctioned entity. The authority maintains a balanced enforcement approach (enforcement factor: 1.1), combining deterrent fines with corrective orders. Its most significant action was a €257,427 fine against Creditinfo Lánstrausti hf. in 2023. The most frequently cited legal basis in Persónuvernd's decisions is Art. 32(GDPR) and Art. 6(GDPR).
Largest Fines by Persónuvernd
View all actionsRecent Actions by Persónuvernd
View all actionsEnforcement by Year
| Year | Actions | Total Fines |
|---|---|---|
| 2020 | 11 | €38K |
| 2021 | 18 | €214K |
| 2022 | 15 | €60K |
| 2023 | 16 | €830K |
| 2024 | 4 | €11K |
| 2025 | 1 | €34K |
Most Cited GDPR Articles
Frequently Asked Questions
How many GDPR and data-protection actions has Persónuvernd issued?
Persónuvernd has issued 65 enforcement actions related to GDPR and data-protection, totaling €1.2M.
What is Persónuvernd's largest GDPR and data-protection fine?
The largest was a €257K fine against Creditinfo Lánstrausti hf. on 2023-07-04.