The Icelandic data protection authority ('Persónuvernd') published, on 11 May 2022, its decision in Case No. 202010521, as issued on 23 March 2022, in which it found the processing of personal data from recording a house meeting fell outside the scope of Article 9 of the Act 90/2018 on Privacy and Processing of Personal Data ('the Act') and Article 6 of the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR'), following a notification from a complainant.

Background to the decision

In particular, the Persónuvernd highlighted that on 4 October 2020, it received a complaint regarding the unauthorised recording and broadcasting of a house meeting of a resident's association with teleconference equipment. Although, the Persónuvernd noted the residents association was unaware it the house meeting was being recorded by a member whose telephone was used as they attended through their mobile phone.

Findings of the Persónuvernd

In light of the above, the Persónuvernd found that the residents association notified the house meeting that one member would attend the meeting through their mobile phone at the beginning of the house meeting, without comment by attending members. Accordingly, the Persónuvernd found that it does not have grounds to take action on the complainant's request under Article 9 of the Act or Article 6 of the GDPR.

Outcomes

In conclusion, the Persónuvernd found that the recording of the resident's association house meeting fell outside the scope of Act and GDPR. Therefore, the Persónuvernd closed its investigation.

You can read the decision, only available in Icelandic, here.