OBS_VALUE: The general rule is that data transfers are only possible to countries that ensure an adequate level of protection or if certain safeguards are in place. The EU Commission determines which third countries are deemed to provide adequate data protection.  For an English translation of the Act on Data Protection and the Processing of Personal Data, see: https://www.personuvernd.is/information-in-english/