Daily Compliance News: June 19, 2025, The Corruption in Spain Edition
JONES DAY TALKS®: Collective Actions in Spain: A Look Around and the View Ahead
JONES DAY TALKS®: Private Antitrust Litigation in Spain
JONES DAY PRESENTS®: Trade Secret Enforcement in Spain
Viewpoints: President José María Aznar Examines Economic Landscape in Latin America
Open for Business: Who's Investing in Latin America
The Spanish Data Protection Authority (“AEPD“) has published its 2024 annual report, which includes the AEPD’s awareness-raising activities; the collaboration and inspection activities of the Spanish authorities; relevant...more
On 17th June 2025, the Spanish Data Protection Authority (“AEPD”) published guidance in relation to Royal Decree 933/2021, which regulates document registration and information obligations relating to accommodation and motor...more
Spain pioneers AI governance with Europe's first AI regulator (AESIA), an already active regulatory sandbox, and a draft national AI law implementing the EU AI Act. Laws/Regulations directly regulating AI (the “AI...more
The pre-draft bill (Draft Bill) on Spanish Organic Law for the Protection of Minors in Digital Environments has been adopted and is currently open for public comments until 28 June 2024. Although still in its early stages,...more
Introduction - We have compiled the main differences between the REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing...more
The Spanish Data Protection Agency ("Spanish DPA") has recently published on its blog guidance on the assessment of human intervention in automated decisions. Evaluating the degree of human intervention has become a critical...more
La Agencia Española de Protección de Datos (AEPD) ha publicado un nuevo informe sobre los sistemas internos de información en el contexto de la Ley 2/2023 de 20 de febrero, reguladora de la protección de las personas que...more
The Spanish Data Protection Agency (SDPA) has published a brief guidance on the use of cookies (or similar technologies) as audience measurement tools (the “Guidance”). In the framework of the Guidance, the SDPA clarifies...more
The EU Artificial Intelligence Regulation will create a framework for the use of artificial intelligence systems. Discrimination and discriminatory bias will be prohibited and subject to fines. Other AI systems will be...more
By now, many of us are using AI, advising others about how to use AI, and waiting for some legislative miracle to give us some guardrails for what we can or cannot be doing with AI. A lot of effort has been put into tracking...more
La Agencia Española de Protección de Datos ha actualizado su Guía sobre el uso de las cookies. Existen cambios relevantes, como nuevos requisitos en el diseño del banner de cookies así como las características para que las...more
The Spanish Data Protection Agency has updated its guidance on cookies. There are relevant changes such as (i) the new requirements for the design of the cookie banner and (ii) the criteria for the installation of...more
La Agencia Española de Protección de Datos ha publicado una nueva decisión en relación con las prácticas de marketing telefónico, recientemente reguladas en nuestro país por la Ley General de Telecomunicaciones. Dicha...more
The Spanish Data Protection Authority has opened a public consultation process to obtain comments for an incoming decision establishing the rules for commercial communications via telephone. This decision will be binding upon...more
Some weeks ago, we described the highlights of the new "Code of Conduct on the processing of personal data in the field of clinical trials and other clinical research as well as pharmacovigilance" (CoC) and the impact on data...more
Last week we raised our hands to inform you about the Spanish Data Protection Authority’s approval of the "Code of Conduct on the processing of personal data in the field of clinical trials and other clinical research as well...more
The Spanish Data Protection Authority published on Friday on its website the new "Code of Conduct on the processing of personal data in the field of clinical trials and other clinical research as well as pharmacovigilance"...more
The European Union is investing resources and issuing legal tools in order to foster the lawful and accountable use of artificial intelligence (AI). In Spain, the Government is also working to promote and maximize the use of...more
Spanish Government has approved a Royal Decree by which people or companies that offer lodging and/or rental car (without driver) services, will need to share a very broad list of personal data with Spanish enforcement...more
Today’s global healthcare marketplace is marked by unprecedented transformation. The seismic shifts in healthcare delivery and drug development during COVID-19 have, in 2021, continued to demonstrate the power and capacity...more
Welcome to the latest edition of Updata - the international update from Eversheds Sutherland’s dedicated Privacy and Cybersecurity team. Updata provides you with a compilation of privacy and cybersecurity regulatory and...more
When launching a project that involves processing of personal data, previously collected for a different purpose, what are the requirements? Companies usually focus on the legal basis of processing and information duties, but...more
Spain has just passed the law transposing Directive (EU) 2019/770 on certain aspects concerning contracts for the supply of digital content and digital services ("Directive 2019/770"). This Directive has updated and brought...more
The Spanish data protection authority AEPD fined Equifax 1 million Euros for processing publicly available personal data unlawfully in violation of the purpose limitation, data minimization and other General Data Protection...more
The Spanish Data Protection Agency (“Spanish DPA”) decided to start 2021 the same way it ended 2020: by imposing the highest fines to date (EUR 5,000,000 and 6,000,000) to two large Spanish financial entities. ...more