What happened
The Spanish Data Protection Agency (AEPD) announced that registration is open for its cybersecurity and data protection session at the XX Jornadas STIC. The event will take place on 24 November 2026 in Madrid and will feature round‑tables and presentations on security measures, breach sanctions, biometric data use and the role of DPDs. Professionals from public administration, industry and academia are invited to attend.
Why it matters for trust and compliance
- Its status is announced. It is not law yet. Track it, but do not treat it as an obligation.
- The AEPD event will address emerging cyber‑security challenges for personal data protection, providing guidance relevant to privacy and AI practitioners.
Who is affected
technology government controller processor Agencia Española de Protección de Datos (AEPD) Grant Thornton Sofistic Deloitte ISMS Forum Asociación Profesional Española de Privacidad e Inteligencia Artificial (APEP·IA) Asociación Española para la Calidad (AEC)
Recommended actions
- Check that privacy notices describe the practices this addresses.
- Map the security requirements to existing controls and close gaps.
- Check breach-notification procedures and timelines against the requirement.
- Inventory AI or automated decision systems in scope and their assessments.
- Confirm handling of sensitive data categories meets the stricter rules.