Continue reading on DataGuidance with:
Free Member
Limited ArticlesCreate an account to continue accessing select articles, resources, and guidance notes.
Already have an account? Log in
Create an account
Join our community for free to access exclusive whitepapers, reports, and regulatory information.
Iceland: Persónuvernd dismisses complaint against City of Reykjavík for the processing of a disabled person's personal data
On February 2, 2024, the Icelandic data protection authority (Persónuvernd) published an extract from its decision in Case No. 2020072069, in which it dismissed the complaint made on the sharing of personal information about a disabled person from the City of Reykjavík to the Ministry of Social Affairs without the consent or knowledge of the complainant or their representative.
Background to the case
In particular, the Persónuvernd stated that the case relates to the communication by the City of Reykjavík of the complainant's personal information to the Ministry to achieve the goal of collecting and sharing information between the municipality and the Ministry to ensure comparable services to disabled persons in light of different needs.
Findings of the Persónuvernd
The Persónuvernd found that the communication was in accordance with Article 9(3) of the Act on Privacy and Processing of Personal Data (the Act) and Article 6 of the General Data Protection Regulation (GDPR), which stipulates that processing is permitted if it is necessary to fulfill a legal obligation incumbent on the controller.
Outcomes
In light of the above, the Persónuvernd dismissed the complaint against the City of Reykjavík.
You can read the press release, only available in Icelandic, here.
Send us your Feedback!
Please let us know what you think of DataGuidance! It will only take 60 seconds and help us make the site better for you.
