# AI rules in Spain

The EU AI Act applies directly; AESIA is operating as a dedicated AI supervisor and an organic law setting AI Act sanctions and authorities has been in Congress since June 2026.

- **Approach:** Comprehensive AI law
- **Key bodies:** AESIA, AEPD, Consejo General del Poder Judicial, Ministry for Digital Transformation and the Civil Service
- **Last reviewed:** 4 Oct 2026

## Rules (2)
- [Spanish AI governance bill](https://wheresthe.ai/rule/es-ai-governance-organic-law-bill-2026/index.md): Proposed, Bill. Government bill adapting Spanish law to the EU AI Act: designates market surveillance authorities (mainly AESIA, plus the AEPD and the General Council of the Judiciary by area), sets the sanctions regime, creates an inventory of AI systems used in state administrative procedures and governs AI sandboxes. Failing to disclose deepfakes ('ultrasuplantaciones') or AI interaction is classed as a serious infringement.
- [AESIA Statute](https://wheresthe.ai/rule/es-aesia-statute-rd-729-2023/index.md): In force, Regulation. Creates AESIA, based in A Coruña, as the state agency to supervise AI and serve as Spain's main AI Act market surveillance authority. It defines the agency's functions, governance and powers.

## Programmes and facts
- National AI regulatory sandbox run ahead of the EU obligation

---
Canonical page: https://wheresthe.ai/j/es/ · Not legal advice.