THE BOTTOM LINE
- New AI Compliance on the Horizon: Companies developing or deploying AI systems in Spain should prepare for a new national legal framework. This will likely introduce specific governance and risk-management obligations beyond the EU AI Act.
- Modernized Reputation Risk: The proposed update to Spain’s Right to Honour law will create new rules for navigating online defamation, privacy breaches, and deepfakes, directly impacting corporate brand management and liability.
- A Signal for Proactive Governance: The advancement of these two bills indicates a proactive regulatory approach in Spain. Businesses should begin reviewing their AI ethics policies and digital risk strategies now to stay ahead of the curve.
THE DETAILS
Spain’s legislative agenda has taken a significant step forward as the General Council of the Judiciary (CGPJ), the governing body for the country’s judges, has formally approved its reports on two critical draft bills. While this is a procedural step, it is a mandatory one, signaling that the proposed laws are advancing through the legislative pipeline. The first bill aims to establish a national framework for the good use and governance of Artificial Intelligence, while the second seeks to modernize the Organic Law protecting the civil right to honour, privacy, and one’s own image. For business leaders and their legal counsel, these developments are a clear indicator of Spain’s intent to regulate the digital frontier.
The proposed AI law is particularly noteworthy for any company leveraging artificial intelligence within the Spanish market. It is expected to complement the EU’s overarching AI Act by creating specific national standards and supervisory bodies. For CEOs, this means the era of treating AI as a purely technological or back-office function is over. The new law will almost certainly mandate formal governance structures, requiring clear lines of accountability, transparency in algorithmic decision-making, and robust human oversight, especially for high-risk applications. Legal teams should anticipate new compliance burdens and begin mapping their company’s AI usage to prepare for future risk assessments and reporting duties.
Simultaneously, the reform of the law protecting honour and privacy is a direct response to the challenges of the digital age. The existing law dates back to 1982 and is ill-equipped to handle issues like viral misinformation, online harassment, or the malicious use of AI-generated content (deepfakes). For businesses, this modernization will have a direct impact on brand and reputation management. It will likely strengthen the legal avenues for combating false online reviews, protecting executives from digital smear campaigns, and holding platforms more accountable for harmful content. This makes a proactive digital risk and crisis communication strategy more critical than ever.
SOURCE
Consejo General del Poder Judicial
