Port of call · Reykjavik
Iceland's data-protection act, the authority that enforces it, and the official energy and climate figures behind its datacenters.
Quick answer
Is Iceland a good country for offshore hosting?
Iceland is a good country for offshore hosting if you want GDPR protection outside the European Union. It is not an EU member, but the GDPR applies there through the EEA Agreement. The independent authority Persónuvernd enforces it. In 2015, almost all its electricity came from hydro and geothermal plants. Ravenquay rents unmetered servers in Reykjavik from $72.62 per 30 days. No KYC, paid in crypto.
| EU member | No. Iceland applies EU data-protection rules through the EEA Agreement |
|---|---|
| Data-protection law | Act No. 90 of 27 June 2018, in force since 15 July 2018 |
| GDPR | Applies as incorporated into the EEA Agreement by EEA Joint Committee Decision 154/2018 (Article 2) |
| Authority | Persónuvernd, the Data Protection Authority, which takes no instructions (Article 38) |
| Highest administrative fine | ISK 2.4 billion, or 4% of a company's global annual turnover if higher (Article 46) |
| Electricity | Almost 100% renewable in 2015: about 73% hydropower, 27% geothermal |
| Reykjavik in 2025 | Annual average 6.1 °C; warmest day 21.8 °C |
| Hosts selling servers in Iceland | 7 of 34 checked on 30 October 2026 |
| Ravenquay in Reykjavik | Harbor 8 at $72.62/30 days, the same price as every port of call |
Iceland is not one of the European Union's 27 member countries. It applies the GDPR anyway. Act No. 90/2018 makes the Regulation law in Iceland, as incorporated into the EEA Agreement by EEA Joint Committee Decision 154/2018 (Article 2).
Its first article names two aims. One is respect for private life when personal data is handled. The other is the free flow of that data within the EEA single market (Article 1). For a European business, a server in Reykjavik sits under the same Regulation as one in Frankfurt or Lyon.
The European Commission's adequacy decisions reach Iceland as well. Its page says data can flow from the EU "and Norway, Liechtenstein and Iceland" to each adequate country. Switzerland, in turn, lists Iceland in Annex 1 of its Data Protection Ordinance as a state with adequate protection.
Act No. 90/2018 fills in the national details that the GDPR leaves to each state. It applies to controllers established in Iceland, wherever the processing takes place (Article 7). It also covers controllers outside the EEA that offer goods or services to people in Iceland.
Fines are set in krónur. For duties such as security and records, they reach ISK 1.2 billion or 2% of a company's global turnover. For core principles, people's rights and international transfers, the ceiling doubles to ISK 2.4 billion or 4% (Article 46).
The Act also has criminal penalties. A serious offence can bring up to three years in prison: an intentional disclosure for profit of secret data on many people (Article 48).
Persónuvernd publishes an English translation for information only; if the texts differ, the Icelandic original applies. What you read here is general information on the law, not legal advice.
Persónuvernd is Iceland's Data Protection Authority. The Act describes it as an independent body that does not accept instructions from the authorities or anyone else (Article 38).
A board of five sets its policy with the Data Protection Commissioner. Members serve five-year terms, at most three in a row. The chair and deputy chair must be lawyers who qualify as district court judges. The Icelandic Computer Society appoints one member with technical expertise.
No other authority hears appeals against Persónuvernd's decisions; a party can still go to court. Anyone can complain to it about the processing of their data in Iceland (Article 39).
Iceland's law gives the national computer society a seat on the data regulator's board.
Renewable power and cool air, according to official figures. The Government of Iceland reports that renewable sources produced almost 100% of the country's electricity in 2015. About 73% came from hydropower and 27% from geothermal power.
The same government page puts the renewable share of Iceland's total primary energy supply at about 85%. It calls that the highest share in any national energy budget.
The Icelandic Meteorological Office measured an annual average of 6.1 °C in Reykjavik in 2025. That was the warmest year on record nationwide. The capital's hottest reading that year was 21.8 °C, on 14 July.
Even in Iceland's warmest year on record, Reykjavik never passed 22 °C.
Few. Of 34 dedicated-server hosts checked on 30 October 2026, only 7 sell servers in Iceland. Just two of them had a plan there that met every rule of the comparison. Those rules include crypto payment, no ID at signup, a CPU from 2018 or later, monthly billing and a port of at least 1 Gbit/s.
| Host | Plan | Cores / RAM / storage | Price per month |
|---|---|---|---|
| AliasVPS | Shield (Intel Xeon E-2388G) | 8 / 32 GB / 2 × 500 GB NVMe | $39.50 |
| FlokiNET | HP ProLiant BL460c G10 High-Freq Edition | 8 / 32 GB / 960 GB SSD | €309.00 ($345.21) |
| Ravenquay | Harbor 8 (Intel Xeon E-2388G) | 8 cores / 16 threads / 64 GB DDR4 ECC / 2 × 960 GB NVMe | $72.62/30 days |
Prices checked on
Prices read on the hosts' public pages on 30 October 2026; 1 EUR = 1.1172 USD (ECB, 30 October 2026). AliasVPS lists prices far below every other host surveyed and its delivery was not verified, so Ravenquay's price rule leaves it out. Plan sizes differ: compare cores and storage, not only the price.
Every Ravenquay berth has the same price in all four ports of call. Unmetered means no monthly traffic quota and no overage bill: the port speed of your plan, 1 or 10 Gbit/s, is the only limit. Each server has one dedicated IPv4 address and an IPv6 /64. For a 10 Gbit/s port in Reykjavik, see where to rent a 10 Gbps unmetered server.
Each has a different strength. Iceland applies the GDPR with high fine ceilings and a regulator that takes no instructions. Switzerland has its own revised act and an EU adequacy decision. Romania applies the GDPR as an EU member, and its Constitutional Court struck down two data-retention laws.
The side-by-side is on Iceland or Switzerland: which has stronger privacy laws. Retention duties are compared on which European countries still have data retention laws. The company behind each server is covered on Panama as a hosting jurisdiction.
Harbor 8 costs $72.62/30 days: Intel Xeon E-2388G (8 cores / 16 threads), 64 GB DDR4 ECC, 2 × 960 GB NVMe in RAID 1, unmetered 1 Gbit/s port, 1 IPv4 and an IPv6 /64. There is no setup fee: you pay the price of your chosen term, both when you order and when you renew. A member of the team sets up your server after your payment is confirmed, within 72 hours, so delivery is not instant; follow its status in the dashboard until the IP address appears.
You pay in BTC, USDT, USDC, ETH, SOL, LTC, from a $25 top-up. Longer terms and the larger berths are on how much a Ravenquay server costs.
Best value
8 cores · unmetered 1 Gbit/s
$72.62
3 months $196.07 (−10%)6 months $348.57 (−20%)1 year $610 (−30%)
16 cores · unmetered 1 Gbit/s
$205.27
3 months $554.22 (−10%)6 months $985.29 (−20%)1 year $1,724.26 (−30%)
24 cores · unmetered 10 Gbit/s
$356.25
3 months $961.87 (−10%)6 months $1,710 (−20%)1 year $2,992.50 (−30%)
In every plan: Unmetered port · Tor exits allowed · RAID 1 · Dedicated IPv4 · No logs · No KYC
No. Iceland is not one of the 27 EU member countries. It applies the GDPR through the EEA Agreement, so personal data moves between Iceland and the EU under the same rules.
Persónuvernd, the Data Protection Authority. It supervises the GDPR and Act No. 90/2018, hears complaints, and can impose administrative fines of up to ISK 2.4 billion or 4% of turnover.
Almost entirely. The Government of Iceland reports that renewables produced almost 100% of electricity in 2015, about 73% from hydropower and 27% from geothermal power.
No. Reykjavik (Iceland), Zurich (Switzerland), Bucharest (Romania) and Amsterdam (Netherlands): every berth in every port of call, at one price.
A member of the team sets up your server after your payment is confirmed, within 72 hours, so delivery is not instant; follow its status in the dashboard until the IP address appears.
Host under Icelandic law, from $72.62
A whole server in Reykjavik with an unmetered port, root access and Linux or Proxmox. No KYC, paid in crypto.
Unmetered from $72.62/30 days · no KYC
Reserve a berth