Data Protection Atlas

Ley Orgánica de Protección de Datos Personales y garantía de los derechos digitales

Tier 2 In force

Spain's implementing act, and the one that departs furthest from the GDPR template of the five profiled here. Title X creates a set of "digital rights" — disconnection from work, digital testament, rights in the workplace and in education — that has no GDPR analogue at all. It creates no criminal offences of its own, and public bodies cannot be fined: they receive a declaration of infringement instead.

Identity

Citation
Ley Orgánica 3/2018, de 5 de diciembre
Jurisdiction
Spain
Type
implementing

← Spain overview

Civil liability

Compensation runs through Art 82 GDPR; the LOPDGDD adds no separate route.

Regulatory enforcement

Public bodies are not fined. Art 77 LOPDGDD substitutes a declaration of infringement, which is why Spanish public-sector enforcement records show findings without figures.

Sources

  • Primary Ley Orgánica 3/2018, de 5 de diciembre Boletín Oficial del Estado no verified URL yet

    URL unconfirmed.

Never independently verified — seeded from the prototype.