Iceland has on June 3, 2006, enacted new legislation on cybercrime and January 29, 2007, ratified the Council of Europe Convention on Cybercrime.

Penal Code § 228 Section 1:
The same penalty shall apply on any person who by unlawful manner obtains access to data or programs stored as data.