Is Doxxing Legal in Iceland After the 2026 Framework Overhaul?

No. Doxxing is illegal in Iceland under the Penal Code (Act No. 19/1940) and the Data Protection Act (Act No. 90/2018). Unauthorized disclosure of personal data with intent to harm, harass, or intimidate constitutes a criminal offense, punishable by fines or imprisonment. The Icelandic Data Protection Authority (Persónuvernd) enforces compliance, and recent amendments in 2026 expanded protections against digital harassment.

Key Regulations for Doxxing in Iceland

  • Penal Code (Act No. 19/1940, §233a): Prohibits the dissemination of private or sensitive personal data with malicious intent, including addresses, financial details, or intimate images. Violations may result in up to 2 years’ imprisonment.
  • Data Protection Act (Act No. 90/2018, as amended 2026): Mandates strict consent requirements for processing personal data. Unauthorized sharing, even for “public interest,” is unlawful if it infringes privacy rights.
  • Electronic Communications Act (Act No. 81/2003): Criminalizes cyberstalking and online harassment, with penalties escalating for repeated or severe offenses. The Ríkislögreglustjóri (National Commissioner of the Icelandic Police) prioritizes digital crimes under this framework.