From the journal

Spain Approves AI Governance Bill and Sends It to Parliament, May 26, 2026

Spain's Council of Ministers approved the Proyecto de Ley para el buen uso y la gobernanza de la inteligencia artificial on May 26, 2026, and submitted it to the General Courts under urgent procedure. The bill transposes Regulation (EU) 2024/1689 (EU AI Act) into domestic law, designates a national supervisory authority, creates an AI delegate role across public bodies, and governs regulatory sandboxes under Article 57 of the EU AI Act.

2 min read

Spain's Council of Ministers approved the Proyecto de Ley para el buen uso y la gobernanza de la inteligencia artificial on May 26, 2026. The bill is at the proposed/legislative stage: it has been submitted to the Spanish General Courts (Cortes Generales) under urgencia (urgent parliamentary procedure) for approval, shortening standard inter-ministerial and Council of State review timelines.

The bill transposes Regulation (EU) 2024/1689 (EU AI Act) into Spanish domestic law, adapting obligations for AI system providers, deployers, and importers to the national legal order. Article 2 of the bill designates a national supervisory authority to exercise market surveillance and enforcement powers under Articles 70 to 77 of the EU AI Act. The bill also introduces a delegado de IA (AI delegate) in each state public body, responsible for overseeing responsible AI deployment, and defines the governance of Spanish regulatory sandboxes under Article 57 of the EU AI Act.

AI system providers placing products on the Spanish market, deployers of general-purpose AI models in Spain, and public-sector bodies procuring AI tools must prepare for domestic enforcement once the bill is enacted. Spanish entities already subject to EU AI Act prohibited practices (in force from February 2, 2025) and governance rules (in force from August 2, 2025) will need to account for the domestic enforcement authority structure the bill creates.

The bill follows the March 2025 Anteproyecto de Ley, which underwent public consultation. Processing under urgencia shortens the timeline for parliamentary debate. Key open points before enactment include the formal designation of the national competent authority and the resourcing plan for the delegado de IA role across multiple public bodies.

We may advise on EU AI Act compliance and Spanish transposition requirements, and have partner counsel in Spain for direct engagement with the regulatory process. Organizations affected by the Spanish AI governance bill are invited to contact us to discuss compliance positioning. Work we undertake includes EU AI Act compliance roadmaps, high-risk AI system conformity assessment, national authority engagement, and AI governance advisory.

Source: La Moncloa, Consejo de Ministros, Proyecto de Ley para el buen uso y la gobernanza de la inteligencia artificial, May 26, 2026

AI Regulatory

More from the journal

See all

New York UCC Revision Act Takes Effect June 2026, Creating Digital Asset Commercial Law Rules

New York Senate Bill S1840A (the UCC Revision Act) took effect on June 3, 2026, amending New York's Uniform Commercial Code to govern digital assets through a new Article 12. The legislation creates rules for the transfer of controllable electronic records, security interest perfection, and priority disputes, and extends good-faith purchaser protections adapted from Articles 3 and 7 to digital instruments.

Five Eyes Agencies Issue Joint AI Cyber Threat Statement, June 22, 2026

CISA (US), NCSC (UK), ACSC (Australia), CCCS (Canada), and NCSC-NZ jointly published a cyber security statement on June 22, 2026. The agencies assess that AI will accelerate the speed, scale, and sophistication of cyber threats, with frontier models expected to exceed current defensive assumptions within months. The statement directs organizations to treat cyber risk as a board-level concern and strengthen foundational controls without delay.

President Trump Signs Executive Order 14409 on AI Innovation and Security, June 2, 2026

President Trump signed Executive Order 14409, Promoting Advanced Artificial Intelligence Innovation and Security, on June 2, 2026. The order establishes a voluntary AI cybersecurity clearinghouse, directs priority upgrades to national security systems within 30 days, and requires protocols for secure frontier AI model deployment within 60 days. It was published in the Federal Register on June 5, 2026 (91 Fed. Reg. 34565).