On July 27, the Spanish parliament approved an emergency Royal Decree Law to regulate enforcement procedures for violations of the GDPR in Spain (source document in Spanish). Although the GDPR is already applicable in Spain, the Royal Decree Law regulates procedures for conducting investigations of potential infringements and imposing sanctions. The Royal Decree Law went into effect on July 31, 2018, and will be in force until the new Spanish Organic Law is passed in Spain.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.