AEPD Spain News

Spain Launches Public Privacy Research Network With Nearly 100 Groups

The Spanish Data Protection Agency (AEPD) has launched a public network of research groups and projects on privacy and emerging technologies, integrating nearly 100 teams, initiatives, and projects from universities, public and private research centres, foundations, and other entities across Spain. The network will hold regular specialist meetings, generate technical and educational content, and promote privacy culture among citizens. Through a collaboration agreement with Fundación ValgrAI, the network will be disseminated and coordinated to dynamize enrolled groups. This initiative positions AEPD as a connecting node between research, regulation, and society in privacy and emerging technologies.

AEPD 2026 Action Plan: 32 Objectives, 115 Actions

The Spanish Data Protection Authority (AEPD) published its 2026 Action Plan and the 2025 execution report on 25 March 2026. The 2025 report shows five strategic axes achieved 100% execution and two exceeded 97%, with aggregate execution above 99%. The 2026 Plan contains 32 operational objectives and 115 actions spanning single, multi-year, and structural initiatives. Key 2026 priorities include AI tool integration through the Privacy Lab, enhanced compliance support for data controllers and processors, international cooperation, and automated process solutions.

EDPB Guidelines on Scientific Research Data Processing Open for Public Consultation

The European Data Protection Board (EDPB), of which the Spanish Data Protection Agency (AEPD) is a member, has adopted Guidelines 1/2026 on processing personal data for scientific research purposes, published for public consultation until June 25, 2026. The guidelines clarify the concept of 'scientific research' through six key factors, address compatibility of subsequent processing with initial collection purposes, and discuss 'broad consent' and 'dynamic consent' models for research. AEPD has supported the Digital Omnibus proposal recognizing legitimate interest as a valid legal basis for research data processing, and positively valued the European Biotech Act's secondary-use data provisions.