Spain

At a glance

Regulator / body: The Spanish Agency for the Supervision of Artificial Intelligence (AESIA), which would become the central authority and single contact point; the Spanish Data Protection Agency (AEPD); the General Council of the Judiciary (CGPJ); the Bank of Spain and sectoral bodies for their own areas. The Ministry for Digital Transformation and Civil Service (MTDFP) leads policy, and Congress must pass the bill (an organic law needs an absolute majority). The International AI Advisory Council advises the minister.
Status: Spain's organic law on AI (PLOIA) is a bill pending before Congress as of the 2026-10-10 reports, but an earlier wiki entry that it had lapsed is unreconciled and flagged below.
Effective dates: PLOIA approved by the Council of Ministers 2026-05-26; published in the Official Bulletin of the Cortes (BOCG) 2026-06-12 as bill 121/000096; no enactment date. Madrid Manifesto presented 2026-10-08 (non-binding).
Last updated: Oct 10, 2026

Recent developments and what to watch

2026-10-08:The International AI Advisory Council, with the digital minister, presented the Madrid Manifesto(non-binding).
2026-06-12:PLOIA was published in the BOCGand remains pending in Congress.
2026-05-26:The Council of Ministers approved the bill.

What to watch:congressional passage (no date stated) and resolution of the lapse-versus-pending conflict above.

Key instruments

PLOIA(Proyecto de Ley Orgánica para el buen uso y la gobernanza de la inteligencia artificial; bill 121/000096). Would make AESIA the central authority and single contact point, with the AEPD, CGPJ, Bank of Spain and sectoral bodies for their areas. It provides sanctions from EUR 35 million or 7% down to EUR 500,000 or 0.5%, a public-sector AI inventory and delegate, and a national sandbox run by AESIA.
Madrid Manifesto on responsible AI(2026-10-08). Advisory and non-binding. It recommends, for example, independent pre-deployment evaluation of frontier and agentic models. These are recommendations, not government powers.
EU deepfake and AI child-abuse-material prohibition.Spain proposed the ban, accepted in trilogue on 2026-05-07; formal status belongs on the European Union entry.

Scope: who and what is covered

If enacted, PLOIA would be Spain's national implementation and governance law for AI, building on the EU AI Act, and would allocate supervision among AESIA, the data-protection agency, the judiciary council, the central bank and sectoral regulators. It also covers public-sector AI governance.

Compliance and enforcement

Until PLOIA is enacted, businesses should apply the EU AI Act directly. The bill's proposed sanctions are high (up to EUR 35 million or 7% of turnover) but remain proposals.

Source conflict (needs confirmation).A prior wiki entry stated that PLOIA “lapsed on dissolution of the Cortes (Royal Decree 806/2026; elections 2026-11-29)”. That entry is dated after the research run, and neither the Spain lane report nor the final report supports it: the final report says PLOIA is still pending in Parliament. The lapse claim is therefore treated as unsupported, but it has not been checked against the Official State Gazette (BOE)or Congress recordsand should be confirmed.

Research assistance, not legal advice; verify before reliance.

References and further sources

Sources and further reading(prepared from the Spanglett Legal AI governance wiki and the October 2026 research run):

Primary source:https://www.congreso.es/public_oficiales/L15/CONG/BOCG/A/BOCG-15-A-97-1.PDF

This page is research assistance, not legal advice. Verify against the primary sources before relying on it.

On this page

Research assistance, not legal advice. Verify against primary sources before reliance.

Compare all jurisdictions →