Online safety & content laws in Iceland (2026)

Regulation (EU) 2022/2065 (Digital Services Act) is formally marked as EEA-relevant and under scrutiny for incorporation into the EEA Agreement by Iceland, Liechtenstein, and Norway. As of 2025-2026, the process has not concluded and no national implementation has begun, meaning Iceland has not designated a Digital Services Coordinator.

Freedom House ranked Iceland first globally for internet freedom in both 2024 and 2025 (score 94/100), citing near-universal connectivity, minimal content restrictions, and strong online rights protections. No evidence of systematic content blocking or government surveillance of online communications.

Iceland's Media Act (No. 38/2011 and subsequent amendments) prohibits hate speech, content inciting discrimination or violence, and discriminatory material. The Media Commission (Fjölmiðlanefnd) oversees compliance; obligations extend to online media services.

In May 2021, the Althingi adopted legislation empowering courts to order the closure or suspension of .is domains engaged in criminal activity or disseminating illegal material, giving authorities a targeted enforcement tool short of a broader content-blocking regime.

ISPs and content hosts are not held liable for content they merely host or transmit, in line with the e-Commerce Directive framework incorporated into the EEA Agreement. Domain registrants bear responsibility for ensuring lawful use of their domains.

The Act on Data Protection and Processing of Personal Data (No. 90/2018, in force July 2018) transposes the EU GDPR into Icelandic law. The Data Protection Authority (Persónuvernd) enforces it, providing a baseline of user-rights obligations on online platforms operating in Iceland.