# Spain

- **Record type**: Jurisdiction profile
- **Short name**: Spain
- **ISO code**: ES
- **Type**: country
- **Region**: Europe / Southern Europe

## In brief

Spain has 3 recorded AI policy instruments, 3 of them binding and 2 in force. EU AI Act applies; AESIA operational; national implementation bill proposed (2025); AI Strategy 2024 as policy. Regulators include Agencia Española de Supervisión de la Inteligencia Artificial (AESIA), Agencia Española de Protección de Datos (AEPD).

## Overview

Spain created the first dedicated national AI supervisory agency in the EU, AESIA, by Royal Decree 729/2023, and ran the first AI Act regulatory sandbox under Royal Decree 817/2023. The government approved a draft law on the good use and governance of AI in March 2025 to implement the AI Act nationally (authorities, penalties, mandatory labelling of AI-generated content), and the 2024 AI Strategy funds compute, language models in Spanish and co-official languages, and public-sector adoption.

## Regulatory status

EU AI Act applies; AESIA operational; national implementation bill proposed (2025); AI Strategy 2024 as policy.

## What is binding and what is guidance

Binding: Royal Decree 729/2023 (AESIA statute); Royal Decree 817/2023 (AI regulatory sandbox); Draft law on good use and governance of AI. Strategy or guidance: none recorded.

## Current priorities

Passing the AI governance bill, AESIA supervision, the sandbox, Spanish-language foundation models and supercomputing.

## Regulators

- Agencia Española de Supervisión de la Inteligencia Artificial (AESIA) — National AI supervisory agency and market-surveillance authority — https://aesia.digital.gob.es/
- Agencia Española de Protección de Datos (AEPD) — Data-protection authority — https://www.aepd.es/

## How to use this profile

- Start from the EU AI Act record for obligations; use this page for the national authorities, penalties and strategy.
- Open the official source on each instrument before relying on any date or obligation.
- Check national data-protection, employment and consumer law that applies to AI systems regardless of the AI Act.

## Official sources

- Real Decreto 729/2023, Estatuto de la AESIA — Boletín Oficial del Estado — https://www.boe.es/buscar/act.php?id=BOE-A-2023-18911
- AESIA — Ministerio para la Transformación Digital y de la Función Pública — https://aesia.digital.gob.es/

## Instruments recorded for this jurisdiction (3)

- **Anteproyecto de Ley para el buen uso y la gobernanza de la inteligencia artificial** — Bill, Proposed, binding
  - Record: https://aipolicytracker.org/policies/spain-draft-law-on-good-use-and-governance-of-ai
  - Context file: https://aipolicytracker.org/policies/spain-draft-law-on-good-use-and-governance-of-ai.md
- **Real Decreto 729/2023, de 22 de agosto, por el que se aprueba el Estatuto de la Agencia Española de Supervisión de Inteligencia Artificial** — Regulation, In force, binding
  - Record: https://aipolicytracker.org/policies/spain-royal-decree-729-2023-aesia
  - Context file: https://aipolicytracker.org/policies/spain-royal-decree-729-2023-aesia.md
- **Real Decreto 817/2023, de 8 de noviembre, que establece un entorno controlado de pruebas para el ensayo del cumplimiento de la propuesta de Reglamento de IA** — Regulation, In force, binding
  - Record: https://aipolicytracker.org/policies/spain-royal-decree-817-2023-ai-sandbox
  - Context file: https://aipolicytracker.org/policies/spain-royal-decree-817-2023-ai-sandbox.md

## Provenance

- **Record page**: https://aipolicytracker.org/jurisdictions/spain
- **Official source**: https://www.boe.es/buscar/act.php?id=BOE-A-2023-18911
- **Source document**: Real Decreto 729/2023, Estatuto de la AESIA
- **Published by**: Boletín Oficial del Estado
- **Review status**: verified
- **Confidence**: medium
- **Facts last confirmed**: 2026-09-26
- **Confirmed by**: Bhaskar Bhatt (see https://aipolicytracker.org/reviewers)
- **Retrieved**: 2026-10-27
- **Licence**: https://creativecommons.org/licenses/by/4.0/

> This record is a structured summary with a link to the official text. It is not legal advice. Open the official source before relying on any date or duty. How current each record type must be is published at https://aipolicytracker.org/verification; what a record must carry at all is published at https://aipolicytracker.org/coverage.