PrivacyIceland
Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018)
What is Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018)?
Iceland's Act on Data Protection and the Processing of Personal Data (Act No. 90/2018) implements the EU GDPR into Icelandic law via the EEA Agreement. It comprises 8 controls organised across 8 domains, and applies in Iceland.
How Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018) maps to other frameworks
All 8 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 8 domains Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018) groups its controls into
Iceland Act 90/2018 Sectoral
Iceland Act 90/2018 Chap 6 - Personuvernd + Enforcement
Iceland Act 90/2018 Chap 5 - Cross-Border
Iceland Act 90/2018 Chap 4 - Security + Breach + DPIA
Iceland Act 90/2018 Chap 4 - Controller Obligations + DPO
Where Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018) overlaps with the standards you already hold
Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018) vs ISO 27001:2022View comparison →Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018) vs SOC 2View comparison →Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018) vs NIST CSF 2.0View comparison →Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018) vs GDPRView comparison →Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018) vs HIPAAView comparison →Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018) vs PCI DSS 4.0View comparison →
What Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018) means in your sector
Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018) for Healthcare→Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018) for Financial Services→Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018) for Technology→Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018) for Government→Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018) for Manufacturing→Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018) for Energy→Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018) for Retail→Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018) for Education→
What Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018) means for your job
Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018) for CISOs→Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018) for Compliance Officers→Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018) for Risk Managers→Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018) for IT Directors→Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018) for DPOs→Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018) for Auditors→
Questions people ask about Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018)
What is Iceland Data Protection and Processing of Personal Data Act?
Iceland's Act on Data Protection and the Processing of Personal Data (Act No. 90/2018) implements the EU GDPR into Icelandic law via the EEA Agreement.
How many controls does Iceland Data Protection and Processing of Personal Data Act have?
Iceland Data Protection and Processing of Personal Data Act contains 8 controls organized across 8 domains.
Where does Iceland Data Protection and Processing of Personal Data Act apply?
Iceland Data Protection and Processing of Personal Data Act is applicable in Iceland. Organizations operating in or serving customers in this jurisdiction should evaluate its requirements.
What frameworks does Iceland Data Protection and Processing of Personal Data Act map to?
Iceland Data Protection and Processing of Personal Data Act has control-to-control mappings with 114 other compliance frameworks in our database. Use our compliance platform to explore these mappings interactively.
How do I get started with Iceland Data Protection and Processing of Personal Data Act compliance?
Start by understanding the framework's key controls and domains. Our compliance platform provides AI-powered gap analysis and mapping tools to help you assess your current posture and build a remediation plan.
Query Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018) programmatically
Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018), its 8 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018) API reference and MCP config →What Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018) requires, control by control
Each page carries the requirement text for one Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018) control and what an assessor expects to see as evidence.
- ICELAND-ACT90-CHAP3-TRANSPARENCY-DATASUBJECTRIGHTS-ACCESS-RECTIFICATION-ERASURE Iceland Act 90/2018 - Chapter III Transparency + Data Subject Rights (Articles 14-23) - Access + Rectification + Erasure + Portability + Object + Automated Decisions
- ICELAND-ACT90-CHAP4-CONTROLLEROBLIGATIONS-PRIVACYBYDESIGN-PROCESSOR-ROPA-DPO Iceland Act 90/2018 - Chapter IV Controller Obligations + Privacy by Design + Processor + RoPA + DPO (Articles 24-26 + 35)
- ICELAND-ACT90-CHAP4-SECURITY-BREACHNOTIFICATION-DPIA-PERSONUVERND-72HR Iceland Act 90/2018 - Chapter IV Security of Processing + Breach Notification + DPIA (Articles 27-29)
- ICELAND-ACT90-CHAP5-CROSSBORDER-EEA-ADEQUACYDECISIONS-SCC-BCR Iceland Act 90/2018 - Chapter V Cross-Border Transfer of Personal Data + EEA + Adequacy + SCCs + BCRs + Article 30 Privacy Policy
- ICELAND-ACT90-CHAP6-PERSONUVERND-ENFORCEMENT-ADMINFINES-AAB-APPEALS-CRIMINALPENALTIES Iceland Act 90/2018 - Chapter VI Personuvernd Authority + Investigation + Administrative Fines + Penal Code Section 228 + Court Appeals
How ready are you for Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018)?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.
Written and maintained by Gerard Blokdyk, The Art of Service.Last updated .