Skip to main content

The Ísland.is App

11th March 2025

The Data Protection Authority's policy for 2025

The Data Protection Authority has decided that in 2025 the following areas of policy will be emphasized in the Authority’s activities.

The Data Protection Authority has decided that in 2025, the following areas of policy will be prioritized in the Authority’s activities:

  1. Processing of personal data for marketing purposes, including by advertising agencies

  2. Health information processing outside healthcare institutions

  3. Personal data processing in apps, computer games and in connection with online shopping

  4. Personal data processing for law enforcement and border control purposes

  5. Personal data processing in cloud computing

  6. Public sector use of social media

  7. Public and private sector stakeholders' forums

This policy does not preclude other types of issues from being considered.