The European Data Protection Board (EDPB) oversees data protection in Iceland and other European countries, providing guidance, recommendations, and enforcement mechanisms to ensure compliance with the General Data Protection Regulation (GDPR). Recently, several Icelandic entities, including municipalities and educational institutions, have been fined by the Icelandic SA for violations such as using Google Workspace for Education without proper authorization, conducting video surveillance without legal basis, and processing credit information unlawfully. These fines aim to uphold data protection standards and serve as examples of enforcement actions taken by the EDPB to safeguard individuals' privacy and data rights in Iceland
https://www.edpb.europa.eu/our-work-tools/our-documents/member-state/island_en