Persónuvernd (Island) · 1 July 2026
Employer
Name not published.
About: Data principles, Data security
FineNo fineRejected
- Regulator
- Persónuvernd (Island)
- Decided
- 1 July 2026
- Country
- Iceland
- Sector
- Not given
- Regulator’s reference
- 2025010358
- Fino case number
- 2026/IS/003
What happened
The DPA held that an employee’s complaint alleging that their employer monitored her work and allowed colleagues to access her personal files was unsubstantiated. The DPA considered that the employer had implemented appropriate security measures such as access controls.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)(f) · 5(2)Read →
- Art. 32Security of processing32(1)Read →
- Data principles
- Data security
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2026/IS/003.