Covid-19 Tracing App

Covid-19 Tracing App is an app that can be downloaded voluntarily and facilitates the contact tracing process amidst the ongoing Covid-19 pandemic. With your consent the app keeps your location data. In case the contact tracing team of the Department of Civil Protection and Emergency Management needs to track your movements, you will be asked to upload your location data to their system.

This would allow for the tracing team to help you retrace your movements for the last two weeks and increase the likelihood of identifying individuals you might have been in contact with.

The data controller is the Directorate of Health, Katrínartún 2, 105, Reykjavik, Iceland.  

Which data do we process?

When downloading and activating the app, you consent to your phone number being stored in our database. While the app is active on your phone, the app will keep 14 days of location information in a secure manner on your device. The app does not collect any location data until you have accepted to use . That means that there will be no data available relating to your movements before you started using the app.

The location data will only be stored on your device and will not be shared with the contact tracing team of the Department of Civil Protection and Emergency Management without your consent. The contact tracing team will only ask for your location data if you are diagnosed with Covid-19 and your movements prior to the diagnosis need to be traced.  

When asked to share your data with the contact tracing team you will be asked to provide them with your national identification number, if you are Icelandic, to ensure that your data is attributed to the right user.

What is the purpose of the processing?

The purpose of the processing is to ensure fast contact tracing of individuals who may have been exposed to the coronavirus that causes Covid-19 in order to combat the ongoing pandemic, as the Chief Epidemiologist of Iceland is required to do by law.


We will only disclose your information to the contact tracing team of the Department of Civil Protection and Emergency Management if they contact you and you decide to share your data with them.

In other cases, we only disclose your personal information if we are required to by law.

We do not transfer personal data to anyone outside the EU/EEA area.

What is our legal basis for processing your data?

The processing of personal data needed for the functioning of the app is based on your consent.

In case you decide to share your location information with the contact tracing team, any further processing is based on the authority vested in the Chief Epidemiologist of Iceland by law.


We take care of your personal data in a secure way to ensure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.

All communication between the app and servers is encrypted. Location data on your device are also encrypted.

Access to databases is logged. Phone numbers stored in our database will be deleted when the need for contact tracing is over.

All location data, transmitted to the contact tracing team, will be deleted from the database 14 days after they were uploaded by the user.

Your Rights

We are committed to respecting the data subjectsʼ rights. You have the right to access all data we may process regarding you. You also have the right to ask us to correct your personal information. You may have the right to. You also have the right to demand amendment or deletion of personal information we have about you as well as the right to data portability restriction of processing of your personal data, to object to the processing and to file a complaint with the Icelandic Data Protection Authority, Persónuvernd.

If you intend to exercise your rights or if you need any further information, please contact us at:

Back to home page