Organic Law 3/2018, of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD) is a key piece of Spanish legislation that adapts the European Union's General Data Protection Regulation (GDPR) to Spanish law, while also adding provisions regarding digital rights. The law came into effect on December 6, 2018, and it repeals the previous Organic Law 15/1999. Among its provisions, the law safeguards minors' data privacy, contributing to a secure online environment. The LOPDGDD emphasises the protection of children's rights in the digital realm, ensuring that their dignity, privacy, and overall well-being are safeguarded online. The law explicitly addresses issues such as consent, information transparency, and the right to be forgotten, aligning with the principles outlined in the UN Committee on the Rights of the Child General Comment No. 25 (2021) on children's rights in relation to the digital environment.
(Source: Spain - Policy monitor country profile, 2025)
Entities responsible for implementation: Government of Spain

Organic Law 3/2018, of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD) is a key piece of Spanish legislation that adapts the European Union's General Data Protection Regulation (GDPR) to Spanish law, while also adding provisions regarding digital rights. The law came into effect on December 6, 2018, and it repeals the previous Organic Law 15/1999. Among its provisions, the law safeguards minors' data privacy, contributing to a secure online environment. The LOPDGDD emphasises the protection of children's rights in the digital realm, ensuring that their dignity, privacy, and overall well-being are safeguarded online. The law explicitly addresses issues such as consent, information transparency, and the right to be forgotten, aligning with the principles outlined in the UN Committee on the Rights of the Child General Comment No. 25 (2021) on children's rights in relation to the digital environment.
(Source: Spain - Policy monitor country profile, 2025)
Entities responsible for implementation: Government of Spain
- data protection GDPR (General Data Protection Regulation) online safety