Makes housing decisions, in Spain

Regulation (EU) 2016/679, Arts. 13(2)(f), 14(2)(g), 15(1)(h) and 22; LOPDGDD, Ley Orgánica 3/2018, Art. 11(2) · Read the law's page

• Give a person in Spain a path to obtain human intervention, express their view, and contest a decision made solely by automated processing that produces a legal or similarly significant effect on them.
• If you use a person's data in Spain for profiling, state in the basic information you give them that they may object to a solely automated decision that produces legal or similarly significant effects on them, where GDPR Article 22 gives that right, under LOPDGDD Article 11(2).
• Do not subject a person in Spain to a decision based solely on automated processing, including profiling, that produces legal effects concerning them or similarly significantly affects them, unless the decision is necessary for entering into or performing a contract with them, is authorised by Union or Member State law that also lays down suitable measures to safeguard their rights, or rests on their explicit consent, under GDPR Article 22(1) and (2).
• Do not base a solely automated decision with legal or similarly significant effects on a person in Spain on the special categories of personal data in GDPR Article 9(1), unless they gave explicit consent or the processing is necessary for reasons of substantial public interest on the basis of proportionate Union or Member State law, and suitable measures to safeguard their rights are in place, under GDPR Article 22(4).
• If you make solely automated decisions about a person in Spain of the kind GDPR Article 22(1) and (4) describe, including profiling, tell them so and give them meaningful information about the logic involved and the significance and envisaged consequences for them: when you collect their data, within the Article 14(3) period where you obtained it from someone else, and in answering their access request, under GDPR Articles 13(2)(f), 14(2)(g) and 15(1)(h).

Ley 15/2022, de 12 de julio, integral para la igualdad de trato y la no discriminación, art. 23 (BOE-A-2022-11589) · Read the law's page

• Public administrations will favour mechanisms so that the algorithms they use in decision-making take account of criteria of bias minimisation, transparency and accountability, wherever technically feasible; the mechanisms cover the algorithm's design and training data and its potential discriminatory impact, and impact assessments to determine possible discriminatory bias are to be promoted (Ley 15/2022, article 23(1)).when it serves a public body
• Public administrations will give priority to transparency in the design and implementation of the algorithms they use in decision-making and to the ability to interpret the decisions those algorithms adopt (article 23(2)).when it serves a public body
• Public administrations and companies will promote ethical, trustworthy artificial intelligence that respects fundamental rights, following the recommendations of the European Union in particular (article 23(3)).

Ley 10/2025, de 26 de diciembre, disposiciones finales primera y tercera (BOE-A-2025-26698), art. 27.9 Ley 3/1991 y art. 20.1.c del texto refundido de la Ley General para la Defensa de los Consumidores y Usuarios · Read the law's page

• If you are a trader making an offer to consumers individually, personalised on the basis of automated decision-making, inform them of the parameters used for the personalisation and, for offers on contracts for financial products or services, of the data sources used (Ley 3/1991, article 27, paragraph 9).
• In contracts concluded at a distance or away from the business premises, give the consumer clear and comprehensible information on the price when it has been personalised on the basis of automated decision-making (Real Decreto Legislativo 1/2007, article 20.1.c).
• Do not let that personalisation increase the final sale price when demand rises in a context of urgency, risk or need of the consumer, such as a civil protection emergency (article 20.1.c).

Regulation (EU) 2024/1689 of the European Parliament and of the Council

• Tell people when they are interacting with an AI system.
• Label AI generated or deepfake content.
• Publish a summary of the training data used to develop a general purpose AI model.
• Comply with rightsholders' copyright opt outs when training a general purpose AI model.
• Do not use subliminal manipulation techniques.
• Do not operate a social scoring system.

Proyecto de Ley Organica, aprobado por el Consejo de Ministros el 26 de mayo de 2026; publicado por el Boletin Oficial de las Cortes Generales el 12 de junio de 2026, iniciando tramite parlamentario en el Congreso (preceded by Anteproyecto of 11 March 2025)

• Label deepfake content as AI generated.
• Disclose to people when they are interacting with an AI system.
• Register public sector use of artificial intelligence.for a public body
• Provide transparency about public sector use of artificial intelligence.when it serves a public body
• Establish a channel for reporting concerns about AI use.
• This measure is in committee and binds nobody yet; what follows is what it would require if it is enacted in this form.