Chapter II (Articles 8-13) Conditions for Processing. Article 8 Principles Relating to Processing - GDPR Article 5 principles transposed: lawfulness + fairness + transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality; accountability. Article 9 Lawfulness of Processing - 6 GDPR Article 6 grounds: data subject consent; contract performance; legal obligation; vital interests; public interest task; legitimate interests (controller / third party balanced against data subject rights and freedoms; Iceland-specific guidance from Personuvernd). Article 10 Conditions for Consent - GDPR Article 7 transposition: freely given + specific + informed + unambiguous + withdrawable + demonstrable; Iceland-specific child consent age 13 (lower than GDPR Art 8 default 16, exercising Article 8(1) discretion). Article 11 Special Categories of Personal Data - GDPR Article 9 transposition with Iceland additions: racial or ethnic origin; political opinions; religious or philosophical beliefs; trade union membership; genetic data; biometric data; health data; sex life or sexual orientation; data about national identification number requires distinct treatment (Iceland-specific - separate Act 21/1989 on Statistical Iceland Personal Identification Number). Article 12 Processing of Criminal Conviction Data - GDPR Article 10 transposition; processing only by official authority or under specific authority; not subject to general lawful basis; particular restrictions on disclosure. Article 13 Personal Data Concerning Communications Confidentiality. Coordinates with GDPR + Iceland Act 21/1989 + Personuvernd Guidance on Sensitive Data + Children + national identification number. Iceland Act 90/2018 + Chapter II + Principles + Lawful Basis + Sensitive + Criminal applies.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.