Europe. National jurisdiction.

Faroe Islands FO

EU adequacy decisionPrimary authority: Dátueftirlitið (Faroese Data Protection Authority)
Part I

Domestic law

Comprehensive data protection1

  • DátuverndarlóginFaroese Data Protection Act – Løgtingslóg nr. 80 frá 7. juni 2020 um vernd av persónupplýsingum (Dátuverndarlógin)The Faroe Islands' GDPR-inspired data protection law; the islands are outside the EU so the GDPR does not apply directly. It covers principles, rights, accountability, breach notification and transfers.
    Synopsis

    The Faroe Islands' GDPR-inspired data protection law; the islands are outside the EU so the GDPR does not apply directly. It covers principles, rights, accountability, breach notification and transfers.

    Key themes
    • principles
    • data subject rights
    • DPO
    • breach notification
    • transfers
    Unique features

    Self-governing territory with its own GDPR-like regime and long-standing EU adequacy.

    SaaS relevance

    Applies to SaaS providers processing personal data of people in the Faroe Islands.

    Extraterritorial
    Yes
    Breach notification
    Authority within 72h; individuals if high risk
    DPO
    Conditional
    Cross-border transfers
    Adequacy/safeguards
    Key dates
    • Adopted
    • In force
    • Amended by Løgtingslóg nr. 29 of 2024-05-10
    Text
    Authority
    Dátueftirlitið (Faroese Data Protection Authority)
    Sources consulted
    Verification

    Medium confidence.

    Partly verifiedMedium confidence. In-force date 2021-01-01 from prior knowledge (chapter 9 not readable). EU adequacy Decision 2010/146/EU confirmed in 2024 review. Penalties not verified.

    Record
    Full record for Dátuverndarlógin
    Partly verifiedMedium confidence. In-force date 2021-01-01 from prior knowledge (chapter 9 not readable). EU adequacy Decision 2010/146/EU confirmed in 2024 review. Penalties not verified.