Spain
watch list Watch list — monitoring for future regulation
Spain is being monitored for emerging AI regulatory developments. Legislation is under development or proposed but not yet enacted or enforceable.
Supranational instruments that may apply
As a member of European Union, Council of Europe, OECD, the following instruments may apply in Spain:
| Instrument | Body | Status | Effective |
|---|---|---|---|
| EU AI Act | European Union | phased enforcement | Aug 1, 2024 |
| Digital Operational Resilience Act (DORA) | European Union | enforcing | Jan 17, 2025 |
| General-Purpose AI Code of Practice (GPAI CoP) | European Union | enforcing | Aug 2, 2025 |
| Framework Convention on AI, Human Rights, Democracy and Rule of Law (CETS 225) | Council of Europe | enacted | |
| ISO/IEC 23894 AI Risk Management | OECD | voluntary | Feb 6, 2023 |
| ISO/IEC 38507 Governance of AI | OECD | voluntary | Apr 8, 2022 |
| ISO/IEC 42001 AI Management System | OECD | voluntary | Dec 18, 2023 |
| ISO/IEC 42005 AI Impact Assessment | OECD | voluntary | May 28, 2025 |
| OECD AI Principles | OECD | voluntary | May 22, 2019 |