Iceland applies GDPR-equivalent rules through the EEA agreement. No blanket telecom data retention requirement. The Persoonuvernd Data Protection Authority treats SIP CDR as personal data and applies the standard data minimisation and retention-limitation principles.
For Issabel operators specifically: configure the CDR module retention to your operational need (typically 90 days), document the retention basis, and apply database-level pruning.