Yes, web scraping is legal in Iceland if conducted within Icelandic and EU data protection laws, particularly the General Data Protection Regulation (GDPR), which applies directly. Publicly accessible data may be scraped unless protected by copyright or contractual terms, but automated collection must respect privacy rights and data minimization principles. The Icelandic Data Protection Authority (Persónuvernd) enforces compliance, and recent 2026 amendments to the Electronic Communications Act (ECA) introduce stricter rules on automated data harvesting, requiring prior consent for large-scale scraping of personal data.
Key Regulations for Web Scraping in Iceland
- GDPR Compliance: Scraping personal data triggers GDPR obligations, including lawful basis (Article 6), transparency (Article 14), and data subject rights. Iceland’s Act on Data Protection and Processing of Personal Data (No. 90/2018) mirrors GDPR, with Persónuvernd issuing fines for violations (e.g., €20M or 4% of global turnover under GDPR).
- Copyright and Terms of Service: The Act on Copyright (No. 73/1972) protects original content; scraping copyrighted material without permission may constitute infringement. Violating website terms (e.g., prohibitions on automated access) can lead to civil liability under Icelandic contract law.
- 2026 ECA Amendments: The revised Electronic Communications Act (effective 2026) mandates prior notification to Persónuvernd for automated data collection exceeding 10,000 records annually. Exemptions apply to anonymized or publicly available non-personal data, but logging or profiling triggers stricter scrutiny.