Online safety & content laws in Iceland (2026)
Online safety rules in Iceland: partial.
Iceland maintains a broadly open internet with no state censorship, rated the world's freest online environment by Freedom House (94/100 in 2024 and 2025). Existing online safety rules derive from the Media Act (hate speech, incitement bans), GDPR-transposing data protection law, and a 2021 law empowering courts to shut down .is domains used for illegal content. The EU Digital Services Act, which would constitute a comprehensive regime, has not yet been incorporated into the EEA Agreement, so no DSA-equivalent national implementation is in force as of 2026.
Legal framework
Media Act (No. 38/2011, amended), Act on Data Protection and Processing of Personal Data (No. 90/2018, GDPR-equivalent), domain-closure powers (2021 amendment to Electronic Communications Act); EU Digital Services Act (Regulation 2022/2065) pending EEA Agreement incorporation
Key points: internet & online safety in Iceland
DSA EEA incorporation pending
Regulation (EU) 2022/2065 (Digital Services Act) is formally marked as EEA-relevant and under scrutiny for incorporation into the EEA Agreement by Iceland, Liechtenstein, and Norway. As of 2025-2026, the process has not concluded and no national implementation has begun, meaning Iceland has not designated a Digital Services Coordinator.
Internet freedom leader
Freedom House ranked Iceland first globally for internet freedom in both 2024 and 2025 (score 94/100), citing near-universal connectivity, minimal content restrictions, and strong online rights protections. No evidence of systematic content blocking or government surveillance of online communications.
Media Act content standards
Iceland's Media Act (No. 38/2011 and subsequent amendments) prohibits hate speech, content inciting discrimination or violence, and discriminatory material. The Media Commission (Fjölmiðlanefnd) oversees compliance; obligations extend to online media services.
Domain closure powers (2021)
In May 2021, the Althingi adopted legislation empowering courts to order the closure or suspension of .is domains engaged in criminal activity or disseminating illegal material, giving authorities a targeted enforcement tool short of a broader content-blocking regime.
Platform liability and ISP safe harbours
ISPs and content hosts are not held liable for content they merely host or transmit, in line with the e-Commerce Directive framework incorporated into the EEA Agreement. Domain registrants bear responsibility for ensuring lawful use of their domains.
Data protection / GDPR equivalent
The Act on Data Protection and Processing of Personal Data (No. 90/2018, in force July 2018) transposes the EU GDPR into Icelandic law. The Data Protection Authority (Persónuvernd) enforces it, providing a baseline of user-rights obligations on online platforms operating in Iceland.
Sources
- twobirds.com/en/trending-topics/digital-services-act-tracker-and-uk-online-safety-
- efta.int/eea-lex/32022r2065
- efta.int/media-resources/news/eea-efta-states-highlight-how-digital-services-a
- freedomhouse.org/country/iceland/freedom-net/2024
- freedomhouse.org/country/iceland/freedom-net/2025
- dlapiperdataprotection.com/index.html?t=law&c=IS
- linklaters.com/insights/data-protected/data-protected---iceland
- lawgratis.com/blog-detail/media-laws-at-iceland
- freedomhouse.org/country/iceland/freedom-net/2022
Next for Iceland: CybersecurityComprehensive law
Next topicOrientation, not legal advice: verify against the primary sources linked above. Last verified 24 May 2026. Methodology & how to cite · State of Technology Regulation 2026