Iceland VPS & offshore servers.
Press freedom outside the EU.

Legal profile

EU status

EEA member since 1994, not in the EU

Digital Services Act

Not incorporated into the EEA Agreement

Data protection

GDPR through Act No. 90/2018

Traffic data retention

Six months, for electronic communications undertakings

Press freedom

12th of 180 (RSF, 2026)

Iceland has been part of the European Economic Area since 1994, so most EU single-market law reaches it through the EEA Agreement. It is not an EU member, and an EU act applies only after the EEA Joint Committee incorporates it. The Digital Services Act has not passed that step: the EFTA factsheet on Regulation 2022/2065 lists it as under scrutiny by Iceland, Liechtenstein and Norway, with no Joint Committee decision. Until that changes, the DSA's notice-and-action rules are not Icelandic law.

Article 73 of the Constitution protects freedom of expression and prohibits censorship. In June 2010 the Althingi unanimously adopted the Icelandic Modern Media Initiative (IMMI), a resolution asking the government to build strong protections for sources, whistleblowers and publishers. It is a mandate, not a statute. Source protection entered the Media Act in 2011 and a whistleblower act followed in 2020, but Freedom House describes much of the program as stalled. RSF ranks Iceland 12th of 180 in 2026, while recording a smear campaign and a police investigation aimed at journalists who covered suspected corruption at a major fishing company.

Copyright complaints under Icelandic law

Iceland transposed the EU e-Commerce Directive through Act No. 30/2002, which contains a statutory copyright notice procedure. Under Article 14, a host is not liable for customer content if it acts promptly on a court ruling or an injunction from a district commissioner, on knowledge of child sexual abuse material, or on a copyright notification that meets Article 15. That notification must identify the sender and the rights holder, locate the material, name the right relied on, confirm that its content is correct and be signed.

The customer must receive a copy and may send a counter-notification. Access is then restored unless the complainant starts court proceedings within two weeks (Articles 16 and 17). A court can order whoever obtained an unjustified removal, or an unjustified restoration, to pay damages (Article 18).

Rights holders also go to court. In October 2014 the Reykjavík District Court ordered the access providers Vodafone and Hringdu to block The Pirate Bay and the Icelandic tracker Deildu at the request of the music rights society STEF (TorrentFreak). Freedom House reports that the blocks remain in place and that an agreement lets the providers add new domains of both sites without further court orders.

Data protection and retention

The GDPR applies in Iceland through the EEA Agreement and is implemented by Act No. 90/2018 on Data Protection and the Processing of Personal Data, in force since 15 July 2018. The supervisory authority is Persónuvernd. If you handle personal data of people in the EU, a server in Iceland is inside the EEA, so no transfer mechanism is needed.

Iceland does keep a retention rule for carriers. Article 89 of the Electronic Communications Act No. 70/2022 requires electronic communications undertakings to keep minimal records for six months: which customer used a given telephone number, IP address or username, and the connections made, with dates and counterparties. Only the police and prosecutors may receive them. Under Article 92, the police can also order an undertaking to preserve existing data for up to 90 days during an investigation.

The duty is placed on undertakings that operate electronic communications networks or services, such as internet access providers and carriers. Icelandic law sets no separate retention period for hosting providers. What we keep is set out in our privacy policy: your email address, your balance and payment records, your sign-in sessions (browser and country, never the IP address) and your service records. We do not log or inspect the traffic on your server.

Iceland is not in the Five, Nine or 14 Eyes intelligence-sharing groups. Those groups share intercepted communications; data on a server here is still obtained through Icelandic courts and mutual legal assistance, as our guide to what the 14 Eyes mean for hosting explains.

How we handle complaints here

1. Every complaint about a server in Reykjavík is logged and checked against Icelandic law.
2. A US DMCA notice is answered, not enforced. It has no legal force in Iceland and is not an Article 15 notification, so nothing happens to your server.
3. A ruling of an Icelandic court or a district commissioner's injunction can require action. A copyright notification that meets Article 15 of Act No. 30/2002 is not an order, but a host that ignores a valid one loses its liability exemption for that material, so we assess it on the merits. In each case we inform you first and send you a copy, and you can respond or counter-notify, unless a court forbids disclosure.
4. Requests and outcomes are published in our quarterly transparency report, without customer data.

Who it suits

Iceland suits projects where the legal climate matters more than the last few milliseconds:

• Journalism, publishing and archives. Constitutional protection against censorship, a high press-freedom ranking and a copyright procedure with a statutory right to counter-notify.
• Non-EU hosting with European data protection. The GDPR applies; the DSA does not yet.
• GPU and compute workloads. Iceland's electricity comes almost entirely from hydropower and geothermal sources, according to the Government of Iceland. GPU servers are offered here, depending on the model.
• Services for the UK, Ireland and the Nordic countries, which the subsea routes reach first.

Available in Reykjavík

Network and latency

Iceland sits in the North Atlantic, about 1,900 km from London and 2,000 km from Amsterdam in a straight line. Every international connection leaves the island on subsea fiber. TeleGeography lists four systems:

• FARICE-1: Seyðisfjörður to the Faroe Islands and Dunnet Bay, Scotland, in service since 2004.
• DANICE: Landeyjar to Blaabjerg, Denmark, since 2009.
• IRIS: Þorlákshöfn to Galway, Ireland, since March 2023.
• Greenland Connect: Landeyjar to Nuuk and Qaqortoq in Greenland and on to Milton, Newfoundland, since 2009.

FARICE-1, DANICE and IRIS are owned by the Icelandic state through Korda, formerly Farice. Three independent routes to Europe give Iceland real cable diversity, but traffic to continental hubs such as Amsterdam or Frankfurt passes through Scotland, Ireland or Denmark first, which adds distance. In a straight line Reykjavík is closer to New York than Amsterdam is, yet Greenland Connect is the only cable heading west, so many routes to North America still run through Europe. Test before you assume a gain.

Our network page lists latency estimates for each location and shows how to measure the real latency yourself. For a side-by-side view of the non-EU options, read Iceland vs Switzerland vs Moldova.