The Spanish Government has published the Preliminary Draft Act for the proper use and governance of Artificial Intelligence (the "Draft Act"), which aims to complement and develop the framework set out by the AI Regulation....more
The pre-draft bill (Draft Bill) on Spanish Organic Law for the Protection of Minors in Digital Environments has been adopted and is currently open for public comments until 28 June 2024. Although still in its early stages,...more
The Spanish National Markets and Competition Commission (CNMC), the authority in charge of supervision and control of competition and DSA coordinator, has published a public consultation on cloud services. The Consultation...more
The Spanish Data Protection Agency ("Spanish DPA") has recently published on its blog guidance on the assessment of human intervention in automated decisions. Evaluating the degree of human intervention has become a critical...more
The Data Act aims, amongst its main objectives, to enable customers of data processing services to switch between providers offering equivalent services, as well as to make use of multiple services from different providers...more
La Agencia Española de Protección de Datos (AEPD) ha publicado un nuevo informe sobre los sistemas internos de información en el contexto de la Ley 2/2023 de 20 de febrero, reguladora de la protección de las personas que...more
Following NOYB's filing of 101 complaints over continuous EU-U.S. data transfers by websites operators in the European Economic Area (EEA) in the post-Schrems II era, the Spanish Data Protection Agency (AEPD) issued its first...more
The Spanish Data Protection Agency (SDPA) has published a brief guidance on the use of cookies (or similar technologies) as audience measurement tools (the “Guidance”). In the framework of the Guidance, the SDPA clarifies...more
The Spanish Data Protection Agency (Spanish DPA) has published guidance on age verification and protection of minors from inappropriate content. After a year of sanctions to adult content service providers, the Spanish DPA...more
The Spanish National Markets and Competition Commission (CNMC), the authority in charge of supervision and control of the audiovisual market, has published a public consultation on criteria for ensuring the adequacy of video...more
La Agencia Española de Protección de Datos ha publicado una nueva decisión en relación con las prácticas de marketing telefónico, recientemente reguladas en nuestro país por la Ley General de Telecomunicaciones. Dicha...more
The Spanish Data Protection Authority has published a new decision regarding phone marketing practices regulated under the recent Spanish General Telecommunication Act. The decision seems to move from an opt-out to a soft...more
A new EU General Court ruling has nuanced the threshold between pseudonymous and anonymous data. In particular, it clarifies that supervisory authorities need to carry out a “test” to assess whether data can be deemed...more
The Spanish Data Protection Authority has opened a public consultation process to obtain comments for an incoming decision establishing the rules for commercial communications via telephone. This decision will be binding upon...more
The Spanish government published last week the pre-draft bill of law on randomized reward mechanisms associated with interactive software products for entertainment (a subtle and technical way of referring to loot boxes in...more
Some weeks ago, we described the highlights of the new "Code of Conduct on the processing of personal data in the field of clinical trials and other clinical research as well as pharmacovigilance" (CoC) and the impact on data...more
Last week we raised our hands to inform you about the Spanish Data Protection Authority’s approval of the "Code of Conduct on the processing of personal data in the field of clinical trials and other clinical research as well...more
3/10/2022
/ Clinical Trials ,
Code of Conduct ,
Cybersecurity ,
Data Controller ,
Data Processors ,
Data Protection ,
Data Protection Authority ,
General Data Protection Regulation (GDPR) ,
International Data Transfers ,
Personal Data ,
Research and Development ,
Spain
It is a rather common practice for companies to run background checks of employees and suppliers before entering into a contract. However, the range and depth of these checks differ from company to company, and the approach...more
The Spanish Data Protection Authority published on Friday on its website the new "Code of Conduct on the processing of personal data in the field of clinical trials and other clinical research as well as pharmacovigilance"...more
The “right of access” recognized by art.15 GDPR is one of the most fervently exercised rights by individuals. Nowadays, where companies tend to amass considerable amounts of information and carry out data processing...more
As it has been said countless times, you have to know the past to face the future. While not that epic, focusing on what has happened in the Spanish data protection environment during the last year is an interesting starting...more
Cars today are able to keep us permanently plugged-in, while collecting and generating increasing amounts of information as a result of their interaction with the driver, passengers, pedestrians, other vehicles, road...more
3/24/2021
/ Artificial Intelligence ,
Automation Systems ,
Automotive Industry ,
Biometric Information ,
Connected Cars ,
Data Collection ,
Data Privacy ,
Data Protection ,
Driverless Cars ,
EU ,
European Data Protection Board (EDPB) ,
General Data Protection Regulation (GDPR) ,
Innovative Technology ,
Motor Vehicles ,
Personal Data ,
Regulatory Standards
The Spanish Data Protection Agency (“Spanish DPA”) decided to start 2021 the same way it ended 2020: by imposing the highest fines to date (EUR 5,000,000 and 6,000,000) to two large Spanish financial entities. ...more
3/11/2021
/ Cybersecurity ,
Data Privacy ,
Data Protection ,
Data Protection Authority ,
Enforcement Actions ,
EU ,
Financial Institutions ,
Fines ,
General Data Protection Regulation (GDPR) ,
Personal Data ,
Personally Identifiable Information ,
Spain
This is the time of the year in which we look back to what has happened during the last 12 months and try to get ready for what is to come. This can be done in many ways, although one of the most common practices is to rely...more
Aunque los conceptos de responsable y encargado del tratamiento han sido ampliamente estudiados y analizados en el pasado, el Comité Europeo de Protección de Datos ha publicado recientemente una guía en la que, además de...more