Act No 90/2018 on data protection and the processing of data implements the General Data Protection Regulation 2016/679 (the GDPR) into Icelandic law.
The regulation entails a significant change in the legal environment of data protection, rights of individuals and obligations on companies and public bodies which process data.
The GDPR introduces the obligation for all public entities and many companies to appoint a data protection officer.
The GDPR allows for the outsourcing of the services of a data protection officer to counsel which meets the requirements laid down in the Regulation. ADVEL has a team of experts that meet the requirements of the GDPR wiht extensive knowlegde of data protection legislation both at national level and within the EEA/EU as well as IT and processing.
We assist companies and public bodies to evaluate the need for a data protection officer, the tasks and scope of such a position and also provide the services of a data protection officer for entities wishing to outsource the post.