Legal framework

Personal Data Protection

Information on the applicable regulations regarding the protection of personal data, both in the specific legislation and in the sectoral legislation applicable in Spain and the European Union.

Data Protection

EU 2016/679

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).

View on EUR-Lex
EU Corrigendum 2016/679

Corrigendum to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

View on EUR-Lex
Spain Consolidated LO 3/2018

Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD). Consolidated text including all amendments.

View consolidated text
Spain RD 428/1993

Royal Decree 428/1993, of 26 March, approving the Statute of the Data Protection Agency.

View on BOE
EU Reg. 2024/1689

Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 laying down harmonised rules on artificial intelligence (AI Act). Progressive application from August 2024.

View on EUR-Lex
New 2024: Regulates AI use with direct impact on personal data processing. Complements the GDPR in high-risk AI contexts.

Information society and telecommunications

Spain Updated Law 34/2002

Law 34/2002, of July 11, on services of the information society and electronic commerce (LSSI-CE). Consolidated text with all amendments.

View consolidated text
Spain Replaced · 2022 Law 11/2022

Law 11/2022, of 28 June, General Telecommunications Act. Repeals and replaces Law 9/2014.

View on BOE
Law 9/2014 was repealed by Law 11/2022. Update references accordingly.
EU Reg. 2022/2065

Regulation (EU) 2022/2065 of the European Parliament and of the Council of 19 October 2022 on a Single Market for Digital Services (Digital Services Act / DSA). Applicable since February 2024.

View on EUR-Lex
EU Reg. 2022/1925

Regulation (EU) 2022/1925 of the European Parliament and of the Council of 14 September 2022 on contestable and fair markets in the digital sector (Digital Markets Act / DMA).

View on EUR-Lex