1. On July 6th, the EEA Joint Committee adopted the Joint Committee Decision on the GDPR, and set an effective date of July 20th (see link)
2. On July 15th, Iceland passed its implementation of the GDPR.
3. Article 48 provides that a severe violation of the Iceland GDPR bill, a person can bill imprisoned for up to three years (see link to the text of the Iceland GDPR bill).