The data protection officer is not required to be a lawyer, but the person concerned must have a clear knowledge of the Data Protection Regulation and

If the individual is not satisfied with the answers he receives, he/she can submit a formal complaint to the Data Protection Authority.

Integrity breach (involving a change in personal data) – a change in personal data by mistake or without permission.

The Icelandic Data Protection Authority does not grant permission for scientific research in the health field, but the institution gives a comment to

When deciding that data will be stored in a cloud it is important to start by checking if the data involves personal data.

A web cookie is a small text file, stored on a computer or other smart device when a user visits a website.

; or that the processing is necessary for a work carried out in the public interest or for the exercise of a public authority controlled by the administrative

If the country of destination is not considered a secure third country or the company is a secure company of destination, personal data may not be transferred

The same applies to information necessary for the delineation, presentation or defense of a claim in the course of a judicial proceeding or other such