DIRECTIVE (EU) 2019/882 · IN FORCE SINCE 28 JUNE 2025 EU-HOSTED · GDPR-CLEAN
EAA Compliance

Enforcement tracker / Spain

Spain enforces the Ley 11/2023 — not “the EAA”.

Spain transposed early through Ley 11/2023, with consumer authorities at state and regional level responsible for surveillance of in-scope services.

StatusMarket surveillance InstrumentLey 11/2023 (Ley 11/2023) RegulatorConsumer authorities (state and autonomous communities) PatternSurveillance active
01REGIME

The regime at a glance

One law, one regulator — on the record.

Ley 11/2023 (Ley 11/2023) is Spain’s transposition of Directive (EU) 2019/882, with EN 301 549 as the presumption of conformity. Obligations for services run from 28 June 2025.

Enforcement runs through Consumer authorities (state and autonomous communities). The register below and the event feed record how that authority actually behaves — not what the statute merely permits.

Spain — key data
National law
Ley 11/2023 (Ley 11/2023)
Services from
28 June 2025
Regulator
Consumer authorities (state and autonomous communities)
Standard
EN 301 549 → presumption of conformity
Penalties
Administrative fines under Ley 11/2023
CURATED REGISTER · UPDATED 17 AUG 2026
02PRIORITIES

Statement enforcement & sector priorities

The statement is the first thing they check.

In-scope services must publish accessibility information — and a missing or contradictory statement is the cheapest violation to spot and cite. It is the standard opening move of letters and regulator sweeps alike: no scanner needed, just a look at your footer.

Our statement generator keeps the published statement consistent with your actual evidence — it regenerates from the coverage matrix, so the statement never claims more than the ledger can prove. Enforcement attention in Spain currently concentrates where consumer volume lives:

E-commerce Banking & payment services
What an operator here should hold
  • Published accessibility statementConsistent with the evidence — regenerated, not hand-edited
  • Current conformance reportEN 301 549 aligned, continuously maintained
  • Dated remediation recordTriage, fixes and sign-offs on the append-only ledger
  • Authenticated-flow evidenceCheckout and login journeys — where enforcement points first
03EVENTS

The live feed

Spain — enforcement events.

Curated, dated, sourced. Only verifiable events enter the feed — letters, orders, sweeps, proceedings, official guidance. No speculation, no ceiling theatre.

ES · NEWEST FIRSTVERIFIED EVENTS ONLY

No verified events on file for Spain yet — the regime data above is maintained, and events land here as they are verified.

04NEARBY

Selling into more than Spain?

The requirements are harmonized; the regulators and search terms are not. Each country page carries its national instrument and pattern.

For operators in the Spain market

Open the file before the letter arrives.

Monitoring, statement, conformance report and ledger — maintained continuously, exportable the day you need them. That is the difference between answering a deadline and negotiating an escalation.