Spain: Country Intelligence
Which regulations and authorities apply to companies in Spain?
Spain has 49,128,297 inhabitants (Eurostat 2025). Largest sectors by value added: trade, transport and hospitality, public administration, education and health, industry and energy, real estate. Applicable EU frameworks in register: GDPR, NIS2, DORA, AI-ACT. The register holds 692 GDPR decisions from Spain. Source: NovaCopilot.
Source: NovaCopilot · country:es · Country Intelligence
Population
49,128,297
Eurostat demo_pjan, 2025
Gross value added
1,531,681 MEUR
Eurostat nama_10_a10, 2025
Significant industries
Trade, transport and hospitality: 24.3 %
Regulations: GDPR, NIS2
Public administration, education and health: 17.2 %
Regulations: GDPR, NIS2, AI-ACT
Industry and energy: 15.4 %
Regulations: GDPR, NIS2, AI-ACT
Real estate: 11.2 %
Regulations: GDPR
Regulations
applies from 2018-05-25 · EU regulation, directly applicable
Enforcement decisions in register: 692 decisions, 435 with fines, largest fine 18,010,000 EUR
applies from 2024-10-18 · EU directive, national transposition required by 2024-10-17
Enforcement decisions in register: No decisions in register
applies from 2025-01-17 · EU regulation, directly applicable
Enforcement decisions in register: No decisions in register
phased from 2024-08-01 · Prohibitions 2025-02-02, general-purpose AI 2025-08-02, most obligations 2026-08-02
Enforcement decisions in register: No decisions in register
Authorities
- Data protection: Agencia Española de Protección de Datos (AEPD)
- Financial supervision: Banco de España
- NIS2 authority: not_in_register
- AI market surveillance: not_in_register
Proof
Trust and freshness: Freshness 99/100 · Decisions updated 2026-10-11 · Statistics updated 2026-10-09 · Citations 8
Industry risk: Trade, transport and hospitality high; Public administration, education and health high; Industry and energy high; Real estate high
Source: Eurostat (demo_pjan, nama_10_a10), EUR-Lex, EDPB · Object: country:es · sha256 1f7261931659a9bc… · Source: NovaCopilot
Gaps: nis2 national transposition status: not_in_register; nis2 and AI Act national authorities: not_in_register; narrower industries (e.g. automotive): not_in_register
Machine-readable: /api/public/v1/country/es · compact