Iceland: Adopted list of countries with adequate data protection

On 4 October 2022, the Ministry of Justice of Iceland adopted an "advertisement" (No.1155/2022) listing countries that provide adequate protection of personal information, enabling cross-border data transfers to these countries in compliance with the EU General Data Protection Regulation (GDPR). The list is effective immediately. It lists countries with adequate data protection according to standards set by Article 45 of the General Data Protection Regulation as well as countries with protection considered to be adequate before the entry into force of the GDPR. The order is based on Article 16. Act no. 90/2018 on personal protection and personal data processing.