The Icelandic Data Protection Authority (Persónuvernd) has initiated an audit concerning the processing of personal data by the company Creditinfo Lánstraust hf.

This initiative is part of the authority's strategy for 2026, which prioritizes the processing of financial information. The audit aims to determine whether the personal data used by the company for its credit reports, both for natural and legal persons, provide reliable and conclusive indications on the likelihood of loan contract performance. The investigation will also examine whether this information is necessary for carrying out the creditworthiness assessment. The authority specified that the opening of this audit does not presume a breach of legislation.