🇮🇸GDPR / Act 90/2018

Iceland — GDPR (EEA) DSAR Deadline Calculator

Calculate your exact response deadline under General Data Protection Regulation (via EEA Agreement) + Act No. 90/2018 on Data Protection and the Processing of Personal Data (GDPR / Act 90/2018).

Configure your DSAR
Select jurisdiction, request type, and date — results update instantly.

Your deadline will appear here

Select a jurisdiction and request type to get started

GDPR / Act 90/2018 Overview

Full Name

General Data Protection Regulation (via EEA Agreement) + Act No. 90/2018 on Data Protection and the Processing of Personal Data

Effective Since

2018-07-15

Regulatory Authority

Persónuvernd (Data Protection Authority)

Official Text

View law
Maximum Penalties

€20M or 4% of global annual turnover (GDPR fines apply)

Request Types & Deadlines

Request TypeDeadlineExtension

Right of Access

Art. 15 GDPR — Right to obtain confirmation and access to personal data

1 months+2 months

Right to Rectification

Art. 16 GDPR — Right to have inaccurate personal data corrected

1 months+2 months

Right to Erasure

Art. 17 GDPR — Right to have personal data deleted ("right to be forgotten")

1 months+2 months

Right to Restriction

Art. 18 GDPR — Right to restrict the processing of personal data

1 months+2 months

Right to Data Portability

Art. 20 GDPR — Right to receive personal data in a portable format

1 months+2 months

Right to Object

Art. 21 GDPR — Right to object to processing of personal data

1 months+2 months

Extension Rules

Extension period: 2 months

Conditions: Complex or voluminous requests

Notification required: Within the original 1-month deadline

Special Rules & Common Mistakes

  • GDPR applies directly in Iceland through the EEA Agreement
  • Deadline is 1 calendar month from day after receipt — identical to EU GDPR
  • GDPR was incorporated into Icelandic law via Act No. 90/2018 (effective July 15, 2018)
  • If deadline falls on a weekend or public holiday, it extends to the next business day
  • Persónuvernd is the independent supervisory authority
  • Manifestly unfounded or excessive requests may be refused or charged a reasonable fee

Compare with Other Jurisdictions

LawDeadlineMethodExtension
🇮🇸 Iceland1 monthscalendar months+2 months
🇪🇺 EU GDPR1 monthscalendar months+2 months
🇬🇧 UK GDPR1 monthscalendar months+2 months
🇺🇸 CCPA45 dayscalendar days+45 days

Iceland FAQ

Automate Iceland DSAR tracking

PrivacyCache tracks deadlines, captures cryptographic evidence, and generates audit-ready Deal Packs for GDPR / Act 90/2018 compliance.

Start with PrivacyCache