-Automatic translation

The collection and processing of personal data by the Directorate of Health are intended to enable the directorate to fulfil its obligations according to the laws that apply to the office's activities and when processing is necessary to exercise official authority entrusted in the office.

The Directorate of Health also collects information for contractual relationships with employees or contractors or to establish such contractual relations. The processing of personal data can also take place to protect the legitimate interests of the office, for example, for security or asset protection purposes.

Laws and regulations

• Laws and regulations

Authorization to gather information

Use of personally identifiable data

Data stored by the Directorate of Health is used to fulfil its legal obligation.

Data storage and processing

Personal data under the responsibility of the Directorate of Health and the Chief Epidemiologist are stored and processed by the office's information security policy.

The Directorate of Health is required to deliver all documents to the National Archives of Iceland. In general, personal data processed by the Directorate of Health is handed over to the National Archives when thirty years have passed.

Information is only disclosed to a third party if this is permitted by law, e.g. for scientific research. Service providers working for the Directorate of Health, e.g. regarding technical operations, do not have access to data.

Rights of individuals

Individuals are entitled to be informed of data, with personal identifiers, that are stored by the Directorate of Health, regardless of whether the unique identifiers are encrypted or not, and to be given a copy of such data.

Individuals may have their personal data corrected; in certain instances, they may have the right to delete the data. It should be noted that the right to delete data is very limited as, in most cases, information is processed based on the law, which provides the obligation to store the information. In some instances, individuals may also have the right to object to personal data processing and request that their data processing be limited. Suppose the processing of information is based on consent or contract. In that case, an individual may have the right to receive data on a computer device or to be transferred directly to a third party at the individual's request.

The Directorate of Health's Data Protection Officer can be contacted by e-mail at personuvernd@landlaeknir.is or by phone at 510-1900 if an individual requests further information on the processing of personal data or to make any suggestions concerning it. A post can also be sent to the Data Protection Officer at The Directorate of Health, Katrínartún 2, 6th floor, 105 Reykjavík.

Suppose an individual considers that the processing of personal data by the Directorate of Health is different from the law applicable to it. In that case, they may contact The Data Protection Authority.

Revision

The Directorate of Health may make changes concerning the handling of personal data in accordance with amendments to laws or regulations, an interpretation of their provisions, or if changes occur in how the Directorate processes personal data. Such changes will be announced on the website of the Directorate of Health.