Last review date: 30 December 2024
Yes.
☒ b) other laws that may require the retention and storage of personal data (including, for example, where such data is part of another type of record or dataset) in the local jurisdiction or otherwise prohibit the transfer or disclosure of the personal data outside of the local jurisdiction:
☒ tax or financial record laws
☒ employment laws
☒ other
Bookkeeping
Last review date: 30 December 2024
Yes
☒ Obligation for public sector organizations to share or make accessible non-personal data
If so, please provide brief details of the relevant law or regulation.
The Information Act No. 140/2012 creates a framework that grants public access to information held by public entities, on request, and subject to a list of public and private interest exceptions.
The Health Records Act No. 55/2009 governs the handling of health data in Iceland and ensure that individuals have access to their health records.
The Act on Reuse of public-sector information No. 45/2018, implementing Directive 2013/37/EU as amended on 30 of April 2024 and Directive 2019/1024/EU, provides individuals and entities the right to reutilizing available public-sector information. This right is subject to certain conditions but limits the ability of public sector bodies to enter into exclusive agreements for re-use of the in-scope data.
In addition to the above, the Action Plan on Artificial Intelligence specifically states that the anticipated implementation of the Data Act and Data Governance Act will impose further requirements. However, the timeframe for the implementation is uncertain.