The Bottom Line
- New AI Compliance Ahead: Businesses developing or deploying AI systems in Spain should prepare for a new national governance framework, creating specific compliance obligations beyond the EU AI Act.
- Reputation and Privacy Rules Modernized: A proposed law will update civil protections for honor, privacy, and personal image, directly impacting how companies manage online reputation, marketing, and data handling.
- Legislative Momentum: Spain’s top judicial body has issued its mandatory reports on these draft bills, a key step that signals the government’s intent to move forward with this new legislation.
The Details
Spain’s General Council of the Judiciary (CGPJ), the governing body of the country’s judges, has officially approved its reports on two significant draft laws. This is a crucial procedural step in the Spanish legislative process, indicating that new regulations concerning Artificial Intelligence and fundamental personal rights are advancing. The reports, while not binding, carry significant weight and provide a judicial perspective on the proposed texts, moving them closer to becoming law. Business leaders and legal counsel should now take note of the impending changes in these two critical areas.
The first, and arguably most impactful, proposal is the draft law for the good use and governance of Artificial Intelligence. This legislation aims to create a specific national framework to oversee the rapidly evolving AI landscape. While the EU AI Act sets a pan-European standard, this Spanish law will likely establish national supervisory authorities, specific rules for high-risk AI applications, and clearer liability regimes. For CEOs and their tech teams, this means any AI-driven products, services, or internal processes operating in Spain will soon face a new layer of regulatory scrutiny and national compliance requirements.
The second draft law focuses on modernizing the civil protection of the right to honor, personal and family privacy, and one’s own image. In an era of social media and big data, this law intends to update a legal framework that dates back to 1982. For businesses, this has direct implications for digital marketing, public relations, and human resources. The new rules could change how damages are calculated in defamation cases, introduce new responsibilities for online platforms, and strengthen individuals’ control over the commercial use of their image, affecting everything from advertising campaigns to employee data policies.
Source
Consejo General del Poder Judicial
