Spain — LOPDGDD (Ley Orgánica 3/2018)
Spain's GDPR implementation act, notable for its Título X "derechos digitales" — including education-specific digital-rights provisions no other Member State has.
Statute text is Spanish (the authentic language); this README is curation.
Applicability to EdTech
- Digital-consent age is 14 (artículo 7): a minor's own consent is valid from 14; under 14 requires holders of patria potestad/tutela, with the scope those holders determine (7.2).
- Schools publishing student data (artículo 92): centros educativos (and anyone running activities with minors) must protect the child's best interest when publishing/disseminating their data via information-society services, and publication via social networks or equivalent services needs art. 7 consent — directly governs photo/work sharing features used by Spanish schools.
- Public bodies escape fines (artículo 77): public administrations (public schools included) get a declaratory resolution and corrective measures instead of sanctions, with responsibility routed to the acting authority — but private vendors are fully finable; the AEPD is among Europe's most active regulators.
- Derecho a la educación digital (artículo 83): the curriculum must guarantee digital competence including safe/adequate media use — the demand-side hook for digital-citizenship content; parents' duty in artículo 84.
Contents
| Document | Covers |
|---|---|
| MENORES-Y-CENTROS-EDUCATIVOS.md | artículos 7, 77, 83, 84, 92 |
Enforcement
Agencia Española de Protección de Datos (AEPD, aepd.es); Catalan/Basque regional authorities for their public sectors.
Related
- EU GDPR — directly applicable
- PT Lei 58/2019 — the Iberian sibling (consent 13)
Sources
Meta
Statute text in MENORES-Y-CENTROS-EDUCATIVOS.md is reproduced verbatim in Spanish from the official BOE consolidated text by tools/boe-es/build_es.py; the BOE "Última actualización" date is pinned, so verify fails on a newer consolidation (currently 27/12/2025).