The EU AI Act in Spain
The Act applies in Spain as Union law. The European Commission lists the Agencia Española de Supervisión de Inteligencia Artificial (AESIA) as Spain's single point of contact. The Spanish governance bill that would spread market surveillance across AESIA, the Banco de España, the AEPD and the CGPJ is still before the Cortes. Literacy and transparency dates are the Union dates.
Answered by GlassBots' AI assistant — not a person, not legal advice. We review new questions and publish them as permanent answers.
The EU AI Act applies in Spain as Union law. A Spanish bill cannot weaken it, though Spain can add extra national rules once they are actually in force.
The European Commission lists AESIA (Agencia Española de Supervisión de Inteligencia Artificial) as Spain's single point of contact (list last updated 7 September 2026). The bill that would spread market surveillance across AESIA, the Banco de España, the AEPD and the CGPJ is still before the Cortes — it is not law yet, so we do not treat that split as finished.
Start literacy and chatbot-transparency on the Union dates even while national contact details are checked. Data-protection questions still go to the AEPD; that is GDPR, not a second AI-Act stamp. Article 50 requires a clear notice. It does not name Spanish. Whether Spanish (or co-official language) rules add a language duty for a chatbot notice is not verified here.
This is general information, not legal advice.
What the law actually says
"Each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of this Regulation."— EU AI Act, Article 70(1) (Regulation (EU) 2024/1689) · eur-lex.europa.eu
In plain words
- AESIA’s public site (aesia.digital.gob.es) describes the agency as the body that watches public and private AI use against current rules.
- Data-protection questions still go to the AEPD. That is GDPR, not a second AI-Act stamp.
- Start the Union duties on the Union dates even while national contact details are checked.
Who enforces it there
- AESIA (Spanish Agency for the Supervision of Artificial Intelligence) is the dedicated national AI body. Public site: aesia.digital.gob.es.
- The European Commission lists AESIA as Spain's single point of contact for market surveillance (list last updated 7 September 2026).
- It is widely described as Spain’s Article 70 market-surveillance authority and contact point. That notification to the Commission is not copied from the Commission SPOC table on this page.
Language obligations
- Article 50(5) requires a clear notice. It does not name Spanish.
- Whether Spanish consumer-language rules add a Spanish (or co-official language) duty for a chatbot notice is not verified here.
National additions
- AESIA was established as a state agency (commonly cited as Royal Decree 729/2023). That creates the supervisor; it does not rewrite Article 4 or Article 50.
Where small businesses get help
- Start with aesia.digital.gob.es and eur-lex.europa.eu.
- AEPD remains the data-protection authority for personal-data questions.
- Scans your computer and lists every AI tool your business actually uses.
- Checks your settings files for the transparency basics and produces a plain-language readiness report.
- Runs in your browser, free, nothing uploaded.
- Every month: re-scan, and the report can be updated each month — "what changed since last check" is written for you.
- Your records build into a printable readiness pack: tool inventory, training journal, disclosure checklist.
- Keeps the dated history an inspector would ask to see.
Did this answer your question?
Readiness guidance, not legal advice. GlassBots checks your own computer — nothing leaves it.