Iceland's data protection authority, Persónuvernd, has ruled against telecommunications company Síminn in an investigation related to data subject access requests. Persónuvernd found the telecom did not establish the practices necessary to ensure a data subject's right to object to the processing of personal data for direct marketing purposes. The ruling stems from a complaint alleging Síminn sent a marketing message despite the complainant being registered to the National Registry of Iceland. (Original article is in Icelandic.)
Full Story