On 12 March 2024, the Icelandic Parliament adopted the Media Law Amendment Act (38/2011). The Act specifies that personal data of children, whether collected or generated by media providers, may not be used for commercial activities such as direct marketing or the creation of personalised advertising. Additionally, the Act establishes that infringements related to the processing of personal data are subject to the General Data Protection Regulation (GDPR). Oversight and issuance of sanctions is conducted by the Icelandic Data Protection Authority (Persónuvernd). The Act will enter into effect immediately after it receives presidential assent.
Original source