Spain. The Privacy, Data Protection and Cybersecurity Law Review


Cybersecurity and data protection are becoming essential values for society and, consequently, both areas have undergone significant legal development in recent years. In particular, a new law on cybersecurity and a new national data protection law were passed in the second half of 2018. Both laws are based on and mirror the corresponding EU Security of Network and Information Systems Directive (the NIS Directive) and the General Data Protection Regulation (GDPR). Nevertheless, data protection and privacy rules are more consolidated in the EU and Spain than cybersecurity regulations, which are currently being developed.

Contact lawyers

Other publications

  • Leticia López-Lapuente. In El gobierno de la ciberseguridad. Roberto Fernández (Coordinador), David Velázquez Vioque (Coordinador). Las Rozas (Madrid): Aranzadi La Ley, 2025

  • Isabel Aguilar, Leticia López-Lapuente. In International Comparative Legal Guides. Fintech 2025. James Cook (Contributing Editor), David Ives (Contributing Editor), David Shone (Contributing Editor). London: Global Legal Group, 2025

  • Leticia López-Lapuente. In Comentario a la Ley de los Mercados de Valores y de los Servicios de Inversión, t. II. Rafael Sebastián (Director), Abel B. Veiga Copo (Director), Martin Jordano (Coordinador). Las Rozas (Madrid): Aranzadi La Ley, 2025

  • Mirian Goitia de Gustín, Leticia López-Lapuente. In In-House View Legal Technology. Lexology. Sancho Guibert (Editor). London: Law Business Research, 2025

  • Ignacio Esteban Avendaño, Leticia López-Lapuente. In In-Depth Privacy, Data Protection and Cybersecurity. Lexology, 11th ed. Alan Charles Raul (Editor). London: Law Business Research, 2024