Klaksvík municipality accepts data protection authority ruling on cyberattack failures

Klaksvík municipality will comply with a ruling by the Faroese Data Protection Agency (Dátueftirlitið) after being criticised for inadequate safeguards against a September 2024 cyberattack, Kringvarp Føroya reports.

The agency issued a formal reprimand, stating the municipality had failed to properly protect itself from the digital intrusion. In response, local authorities acknowledged the shortcomings and confirmed they had implemented “significant measures” to prevent recurrence.

Officials told KVF they are in “close dialogue” with the Data Protection Agency to address the identified deficiencies and that cooperation is proceeding as planned. The municipality has until 1 August to formally rectify the issues outlined in the ruling.