Act 2018
Ley Orgánica 3/2018, de 5 de diciembre, de Protección de Datos Personales y garantía de los derechos digitales (Organic Law 3/2018 on Personal Data Protection and guarantee of digital rights)
Issued by Agencia Española de Protección de Datos
Effective: 7 Dec 2018
Plain-English summary
Adapts Spanish law to the GDPR and completes it, and guarantees digital rights under Art. 18.4 of the Constitution. It covers legal bases (Arts. 8 and 9), the exercise of data subject rights (Arts. 12 to 18), the AEPD's regime and powers (Arts. 44 to 56) and infringements and sanctions (Arts. 72 to 78).
Who it applies to
All industries
Topics
Data Protection & Privacy
Obligations arising from this law or regulation
| Obligation | Timing | Regulator | Source | Detail |
|---|---|---|---|---|
| Lawful basis, transparency and data subject rights | Ongoing | AEPD | source | |
Arts. 8 and 9 require processing based on legal obligation or public interest to rest on a law-rank norm, and special categories to meet the further conditions. Arts. 12 to 18 set how access, rectification, erasure, restriction, portability, objection and automated-decision rights are exercised; controllers must explain how and prove they responded. |
||||
| No obligations match these filters. | ||||
Latest news
No related news yet. We publish updates as regulators act.