Spain and the EU AI Act: implementing law, authorities, sandbox and penalties

Implementing law

National implementing act · 2026-06-12 · bill

Organic Bill for the good use and governance of artificial intelligencetranslated

Proyecto de Ley Orgánica para el buen uso y la gobernanza de la inteligencia artificial

Spain's Congress published Bill 121/000096, the Organic Bill for good use and governance of AI, on 12 June 2026. The bill implements AI Act supervision, notifying authority, market surveillance, sanctions and justice-specific authority allocations.

“"Proyecto de Ley Orgánica para el buen uso y la gobernanza"”

Gazette / authority: congreso.es
Read: 2026-09-07 · primary document read
Found via: Future of Life Institute national implementation plans, official source crawl
Notes: Official Congress BOCG PDF; quote under 25 words. BOE official acts are covered by Spanish LPI art. 13; this bill is a parliamentary publication.

Official acts are quoted at ≤25 words in the original language; the status word is the source's on the read date. This record summarises a public court document or official publication and reports what it says; SafeLegalAI makes no findings of its own. Individuals and organisations are named only as they appear in that public record. Anyone named may send a right of reply, correction or contextual update (for example an appeal, vacatur or later disposition) via /report; we add a dated note where appropriate. Reply or correct this record.

Designated authorities

Authority designation · 2026-06-12 · bill

Organic Bill for the good use and governance of artificial intelligencetranslated

Proyecto de Ley Orgánica para el buen uso y la gobernanza de la inteligencia artificial

Authority: Dirección General de Inteligencia Artificial; ENAC — notifying authority

Article 4 of Spain's AI governance bill designates the Directorate-General for Artificial Intelligence within SEDIA as notifying authority for Article 28(1). The bill says ENAC supports conformity-assessment-body evaluation and supervision tasks.

“"Dirección General de Inteligencia Artificial ... como autoridad notificante"”

Gazette / authority: congreso.es
Read: 2026-09-07 · primary document read
Found via: Future of Life Institute national implementation plans, official source crawl
Notes: Official Congress BOCG PDF; quote under 25 words. ENAC is recorded in authority_name because schema has no accreditation role.

Official acts are quoted at ≤25 words in the original language; the status word is the source's on the read date. This record summarises a public court document or official publication and reports what it says; SafeLegalAI makes no findings of its own. Individuals and organisations are named only as they appear in that public record. Anyone named may send a right of reply, correction or contextual update (for example an appeal, vacatur or later disposition) via /report; we add a dated note where appropriate. Reply or correct this record.

Authority designation · 2026-06-12 · bill

Organic Bill for the good use and governance of artificial intelligencetranslated

Proyecto de Ley Orgánica para el buen uso y la gobernanza de la inteligencia artificial

Authority: Agencia Española de Supervisión de Inteligencia Artificial — market surveillance authority, single point of contact

Spain's bill designates AESIA as market surveillance authority for listed AI systems and as a central AI supervisor. The bill also gives AESIA residual functions for systems not assigned to special sector authorities.

“"Se designa a la AESIA como autoridad de vigilancia del mercado"”

Gazette / authority: congreso.es
Read: 2026-09-07 · primary document read
Found via: Future of Life Institute national implementation plans, official source crawl
Notes: Official Congress BOCG PDF; quote under 25 words. RD 729/2023 establishing AESIA was also read from BOE.

Official acts are quoted at ≤25 words in the original language; the status word is the source's on the read date. This record summarises a public court document or official publication and reports what it says; SafeLegalAI makes no findings of its own. Individuals and organisations are named only as they appear in that public record. Anyone named may send a right of reply, correction or contextual update (for example an appeal, vacatur or later disposition) via /report; we add a dated note where appropriate. Reply or correct this record.

Authority designation · 2026-06-12 · bill

Organic Bill for the good use and governance of artificial intelligencetranslated

Proyecto de Ley Orgánica para el buen uso y la gobernanza de la inteligencia artificial

Authority: Consejo General del Poder Judicial — market surveillance authority

Article 5(4) of Spain's bill designates the General Council of the Judiciary as market surveillance authority for specified prohibited, biometric, law-enforcement and Annex III.8(a) justice AI systems used in justice administration.

“"administración de justicia y del cumplimiento del derecho"”

Gazette / authority: congreso.es
Read: 2026-09-07 · primary document read
Found via: Future of Life Institute national implementation plans, official source crawl
Notes: Official Congress BOCG PDF; quote under 25 words. This row records justice/legal-practice relevant coverage.

Official acts are quoted at ≤25 words in the original language; the status word is the source's on the read date. This record summarises a public court document or official publication and reports what it says; SafeLegalAI makes no findings of its own. Individuals and organisations are named only as they appear in that public record. Anyone named may send a right of reply, correction or contextual update (for example an appeal, vacatur or later disposition) via /report; we add a dated note where appropriate. Reply or correct this record.

Regulatory sandbox (Art. 57)

Regulatory sandbox (Art. 57) · 2023-11-08 · operational

Royal Decree 817/2023 establishing a controlled testing environment for the proposed AI Regulationtranslated

Real Decreto 817/2023, por el que se establece un entorno controlado de pruebas para el ensayo del cumplimiento de la propuesta de Reglamento

Authority: Government of Spain; AESIA/SEDIA ecosystem — sandbox operator

BOE Royal Decree 817/2023 establishes Spain's controlled testing environment for implementing requirements applicable to high-risk AI systems and general-purpose or foundation models under the proposed European AI regulation.

The royal decree creates Spain's early controlled testing environment to test high-risk and general-purpose AI requirements.

“"pone en marcha el primer entorno controlado de pruebas"”

Gazette / authority: boe.es
Read: 2026-09-07 · primary document read
Found via: Future of Life Institute national implementation plans, official source crawl
Notes: Official BOE source; Spanish official acts are excluded from copyright by LPI art. 13, quote still under 25 words.

Official acts are quoted at ≤25 words in the original language; the status word is the source's on the read date. This record summarises a public court document or official publication and reports what it says; SafeLegalAI makes no findings of its own. Individuals and organisations are named only as they appear in that public record. Anyone named may send a right of reply, correction or contextual update (for example an appeal, vacatur or later disposition) via /report; we add a dated note where appropriate. Reply or correct this record.

Penalties (Art. 99)

Penalty regime (Art. 99) · 2026-06-12 · bill

Organic Bill for the good use and governance of artificial intelligencetranslated

Proyecto de Ley Orgánica para el buen uso y la gobernanza de la inteligencia artificial

Article 30 of Spain's bill sets administrative sanction limits for very serious, serious and minor infringements, including maximum caps aligned with Article 99 of the AI Act and additional product withdrawal or disconnection measures.

Article 30 sets caps up to €35m/7%, €15m/3%, €7.5m/1% and €500k/0.5% by infringement category.

“"hasta 35.000.000 euros o ... hasta el 7 %"”

Authorities in the EU dataset

Agencia Española de Supervisión de Inteligencia Artificial — single-point-of-contact source

Spain and the AI Act

Implementing law

Organic Bill for the good use and governance of artificial intelligencetranslated

Designated authorities

Organic Bill for the good use and governance of artificial intelligencetranslated

Organic Bill for the good use and governance of artificial intelligencetranslated

Organic Bill for the good use and governance of artificial intelligencetranslated

Regulatory sandbox (Art. 57)

Royal Decree 817/2023 establishing a controlled testing environment for the proposed AI Regulationtranslated

Penalties (Art. 99)

Organic Bill for the good use and governance of artificial intelligencetranslated

Authorities in the EU dataset