Personal data can be a valuable asset for companies. At the same time the processing of such data is often a challenge taking into consideration the legal obligations placed on data controllers and data processors. In addition, the most extensive amendments to the data protection legislation which have been made in the last two decades are upcoming, as Iceland must implement the General Data Protection Regulation by 2018.
Our experts have vast experience and training in this field and we assist our clients in complying with the current data protection legislation as well as preparing for the upcoming changes in the legal environment.
Our work in this area includes audits and data mapping, drafting binding corporate rules and providing advice in relation to any data transfer, providing compliance advice and advice on data subject’s access and opposition rights, processing of employment data, supervisory authority relations including notifications and authorizations, drafting processor agreements, advising on the use of clouds etc.