Spanish Data Protection Agency Adopts Resolution On Right To Be Forgotten

A draft bill promotes minors' positive use of digital environments in areas such as education or social interaction

The Spanish government has decided to pass this Royal Decree-law as an interim measure which is permitted by the GDPR.

On August 7, the Spanish DPA published the criteria (source document in Spanish) used in the consideration of a candidate for the 2017 Personal Data Protection Awards.

On November 12, 2015, the Spanish Supreme Court prohibited (source document in Spanish) the maintenance and transfer of files blacklisting workers.

On June 19, the Spanish DPA published the guidelines for managing security breaches and providing notification in compliance ...

On April 10, 2018, the Spanish Data Protection Agency announced that public administrations and companies required to appoint a data protection officer could communicate their appointment via an online form.

The Final First Provision of Organic Law 15/1999, of 13 December for Protection of Personal Data (LOPD) contemplates the competence of the Government to approve or modify the reglementary provisions necessary for application and development of the Law. Eight years have had to pass for us to see, at least, a draft Royal Decree which – under the aegis of the above mentioned Final Provision – approves the Regulation developing the LOPD.

On February 23 2026, the Spanish supervisory authority (AEPD) published an article containing recommendations on operational sovereignty when processing personal data. This follows a major incident on October 20 2025, where a cloud provider experienced technical issues in the United States which affected services globally.

Our new Code≠Law series explores the race to regulate the digital world as emerging technologies create tensions between online freedoms and necessary safeguards.

The Situation: Surging interest in digital tokens has caught the attention of regulators in Hong Kong.

The Ninth Circuit Court of Appeals vacated a preliminary injunction against Perplexity AI, determining that when an AI agent acts at a user's direction, it is the user—not the AI company—who "accesses" computer systems under federal and California computer fraud statutes. This landmark appellate decision addresses how existing computer-access laws apply to agentic artificial intelligence and has significant implications...

The Federal Circuit recently vacated a PTAB decision in Dental Monitoring SAS v. Align Technology, Inc., addressing a critical question about prior art qualification under the America Invents Act.

On February 5, the Third Circuit Court of Appeals affirmed the district court's grant of summary judgment in favor of a defendant that had been sued by a competitor for allegedly accessing the competitor's computer systems...

The defendant argued that the CFAA does not make it a federal crime to obtain permission to use another's login credentials to access a third party's computer system.

China has recently taken several actions showing its commitment to counter trade restrictions imposed by other countries. In March 2025, it released regulations implementing the 2021 Anti-Foreign Sanctions Law.

On October 9, the nation's first data breach class action trial began.

On May 25, the GDPR will replace the current Regulation (EC) No. 45/2001. To raise awareness on the current and new data protection rules ...

Australia has started to observe a rise in the number of data breach class actions being investigated and filed, although there has not yet been a successful data breach class action there.

President Obama has proposed additional funding resources that include an increase of $25.3M of new budget authority to implement FSMA.