Will GDPR override local privacy laws?
<p><a href="https://www.privacypolicies.com/blog/privacy-law-by-country/" rel="nofollow noreferrer">Here</a> it seems all european(EEA) countries and iceland have their own privacy laws . Do we have to follow all of the laws as many do not seem to allow <em>legitimate interest</em>. I mean, is following GDPR enough for Europe?</p>
<h1>Explanation and example:</h1>
<p>If you look at laws of <a href="https://www.privacypolicies.com/blog/privacy-law-by-country/#Finland" rel="nofollow noreferrer">Finland</a> or <a href="https://www.privacypolicies.com/blog/privacy-law-by-country/#Iceland" rel="nofollow noreferrer">Iceland</a> as stated here all require probably consent for collection.</p>
<p>In accordance with tg the given links there is no legitimate interest and Iceland also offers imprisonment. Are these binding or will legitimate interest and liability up to euro 20 million final.</p>

<blockquote>
<p>Do we have to follow all of the laws as many do not seem to allow &quot;legitimate interest&quot;</p>
</blockquote>
<p>That is an inaccurate premise. <em>Legitimate interest</em> is cognizable under section 43(1) of Finland's <a href="https://finlex.fi/en/laki/kaannokset/1999/en19990523_20000986.pdf" rel="nofollow noreferrer">Personal Data Act</a> and articles 4 &amp; 8.7 of Iceland's <a href="https://www.personuvernd.is/information-in-english/greinar/nr/438" rel="nofollow noreferrer">Data Protection Act</a>. These I found by glancing at the Acts, but there might be additional sections/statutes in that direction.</p>
<blockquote>
<p>is following GDPR enough for europe?</p>
</blockquote>
<p>Yes, but there is a caveat because on various matters the GDPR refers or delegates to national laws as well as members' <em>competent authority</em>.</p>

gdpr