Faroe Islands. Comprehensive data protection. Act
DátuverndarlóginFaroese Data Protection Act – Løgtingslóg nr. 80 frá 7. juni 2020 um vernd av persónupplýsingum (Dátuverndarlógin)
In force
Partly verified
Medium confidence.In-force date 2021-01-01 from prior knowledge (chapter 9 not readable). EU adequacy Decision 2010/146/EU confirmed in 2024 review. Penalties not verified.
§1Summary
- Synopsis
The Faroe Islands' GDPR-inspired data protection law; the islands are outside the EU so the GDPR does not apply directly. It covers principles, rights, accountability, breach notification and transfers.
- Key themes
- Unique features
Self-governing territory with its own GDPR-like regime and long-standing EU adequacy.
- SaaS relevance
Applies to SaaS providers processing personal data of people in the Faroe Islands.
§2Obligations
- Extraterritorial
- Yes
- Breach notification
- Authority within 72h; individuals if high risk
- DPO
- Conditional
- Cross-border transfers
- Adequacy/safeguards
§3Dates
- Key dates
- Adopted
- In force
- Amended by Løgtingslóg nr. 29 of 2024-05-10
§4Text and authority
- Text
- Authoritative text logir.fo
- Authority
- Dátueftirlitið (Faroese Data Protection Authority)
§5Where it applies
- Domestic law of
- Faroe Islands
§6Sources and verification
- Sources consulted
- Verification
Medium confidence.
Partly verified
Medium confidence.In-force date 2021-01-01 from prior knowledge (chapter 9 not readable). EU adequacy Decision 2010/146/EU confirmed in 2024 review. Penalties not verified.