The EU AI Act in Spain
The Act applies in Spain as Union law.
Drafted with AI help and checked against the official EU text before publishing.
The Act applies in Spain as Union law. The European Commission lists the Agencia Española de Supervisión de Inteligencia Artificial (AESIA) as Spain's single point of contact. The Spanish governance bill that would spread market surveillance across AESIA, the Banco de España, the AEPD and the CGPJ is still before the Cortes. Literacy and transparency dates are the Union dates.
A Spanish bill cannot weaken it, though Spain can add extra national rules once they are actually in force.
The European Commission lists AESIA (Agencia Española de Supervisión de Inteligencia Artificial) as Spain's single point of contact (list last updated 7 September 2026). The bill that would spread market surveillance across AESIA, the Banco de España, the AEPD and the CGPJ is still before the Cortes — it is not law yet, so we do not treat that split as finished.
Start literacy and chatbot-transparency on the Union dates even while national contact details are checked. Data-protection questions still go to the AEPD; that is GDPR, not a second AI-Act stamp. Article 50 requires a clear notice. It does not name Spanish. Whether Spanish (or co-official language) rules add a language duty for a chatbot notice is not verified here.
This is general information, not legal advice.
What the law actually says
"Each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of this Regulation."— EU AI Act, Article 70(1) (Regulation (EU) 2024/1689) · eur-lex.europa.eu
In plain words
- AESIA’s public site (aesia.digital.gob.es) describes the agency as the body that watches public and private AI use against current rules.
- Data-protection questions still go to the AEPD. That is GDPR, not a second AI-Act stamp.
- Start the Union duties on the Union dates even while national contact details are checked.
Who enforces it there
- AESIA (Spanish Agency for the Supervision of Artificial Intelligence) is the dedicated national AI body. Public site: aesia.digital.gob.es.
- The European Commission lists AESIA as Spain's single point of contact for market surveillance (list last updated 7 September 2026).
- It is widely described as Spain’s Article 70 market-surveillance authority and contact point. That notification to the Commission is not copied from the Commission SPOC table on this page.
Language obligations
- Article 50(5) requires a clear notice. It does not name Spanish.
- Whether Spanish consumer-language rules add a Spanish (or co-official language) duty for a chatbot notice is not verified here.
National additions
- AESIA was established as a state agency (commonly cited as Royal Decree 729/2023). That creates the supervisor; it does not rewrite Article 4 or Article 50.
Where small businesses get help
- Start with aesia.digital.gob.es and eur-lex.europa.eu.
- AEPD remains the data-protection authority for personal-data questions.
- Will look for signs of AI use in the folders you choose, and write them down for you.
- Will write a plain-language readiness report. No evidence reads "Not assessed", never a green tick.
- Will run as a free Windows program on your own computer and send nothing from it.
- Coming with Guard: a check every month, kept so you can see your history and what changed since the last one.
- Coming with Guard: a printable readiness pack built from your check results — AI use found, training notes, disclosure checklist.
Did this answer your question?
Readiness guidance, not legal advice. The Free Toolkit sends nothing from your computer.