What happened
The Spanish Data Protection Agency (AEPD) will hold a dedicated data‑protection space on 24 November 2026 during the XX Jornadas STIC conference in Madrid. The event, organized by the Centro Criptológico Nacional, the Centro Nacional de Inteligencia, the Mando Conjunto del Ciberespacio and RootedCON, will address the intersection of cybersecurity, AI and privacy. AEPD stresses the need to embed privacy and data‑protection considerations early in the design of products, services and systems.
Why it matters for trust and compliance
- Its status is announced. It is not law yet. Track it, but do not treat it as an obligation.
- The AEPD’s participation highlights the growing relevance of privacy and data‑protection in AI‑driven cybersecurity discussions.
Who is affected
technology government controller processor developer platform AEPD Centro Criptológico Nacional Centro Nacional de Inteligencia Mando Conjunto del Ciberespacio RootedCON
Recommended actions
- Check that privacy notices describe the practices this addresses.
- Map the security requirements to existing controls and close gaps.
- Inventory AI or automated decision systems in scope and their assessments.