Blog
Cornerstone Insights
Insights on technology, data and digital law, covering key legal and regulatory developments in Spain, the European Union and globally.
Cornerstone InsightsThe AI Act Digital Omnibus Is Now Official
Today, Regulation (EU) 2026/1744, commonly referred to as the AI Act Digital Omnibus, was published…
Cornerstone InsightsWhen Guidance Becomes Regulation: Spanish Court Annuls AEPD Biometric Guidance
The Spanish National Court (Audiencia Nacional) has annulled one of the most controversial data protection…
Cornerstone InsightsAI Transparency Takes Centre Stage: What the New EU Code of Practice Means for Businesses
The European Commission has invited providers and deployers of generative AI systems to sign the…
Cornerstone InsightsPrivacy Enters the Game: Spain and Belgium Publish New Guidance for the Video Game Industry
The Spanish Data Protection Agency (AEPD) and the Belgian Data Protection Authority (APD) have recently…
Cornerstone InsightsPrivacy as a Competitive Advantage: A Lesson from the Streets of Madrid
Walking through Madrid recently, I came across a striking advertisement covering an entire building in…
Cornerstone InsightsCJEU narrows the hosting safe harbour: Does algorithmic curation amount to “control”?
The Court of Justice of the European Union (CJEU) has delivered what may prove to…
Cornerstone InsightsEuropean Parliament Approves AI Act Amendments Under the Digital Omnibus Package
The European Parliament has formally approved the amendments to the EU AI Act proposed under…
Cornerstone InsightsSpain’s AI Governance Bill: A Detailed Analysis of the New AI Enforcement Framework
On 12 June 2026, the Spanish Parliament published the draft Ley para el Buen Uso…
Cornerstone InsightsOperating in Spain? GDPR May Not Be the Only Reason You Need a Data Protection Officer
When organisations assess whether they are required to appoint a data protection officer (DPO), the…
Cornerstone InsightsSpain Approves Draft Bill Implementing the EU AI Act
The Spanish Government yesterday approved the draft bill on the governance and responsible use of…
Cornerstone InsightsEuropean Commission Publishes Draft Guidelines on High-Risk AI Systems under the EU AI Act
The European Commission has published draft Guidelines on the classification of high-risk AI systems under…
Cornerstone InsightsAI Act Omnibus Deal: Simplification, Delays and New Prohibitions
The European Parliament and the Council have reached a provisional political agreement on targeted amendments…
Cornerstone InsightsSpain’s Data Protection Authority Pivots Towards AI, Cybersecurity and Digital Governance
Spain’s Data Protection Authority (AEPD) has published its 2025 Annual Report, revealing far more than…
Cornerstone InsightsRecord GDPR Fines in Spain in 2025: 325 Sanctions Totalling an Unprecedented €48.1 Million
The Spanish Data Protection Agency (AEPD) has published today its FY25 Annual Report, confirming a…
Cornerstone InsightsSpain’s Implementation of the EU Critical Entities Resilience (CER) Directive: Key Elements of the Proposed Bill
Spain is progressing with the implementation of the CER Directive (EU) 2022/2557 through the proposed…
Cornerstone InsightsEU Cyber Resilience Act (CRA): Commission issues first draft guidance – 10 key points you need to know
On 3 March 2026, the European Commission published its first draft guidance on the EU…
Cornerstone InsightsAgentic AI and data protection: guidance from the Spanish AEPD
The Spanish Data Protection Agency (AEPD) has published detailed technical guidance on agentic artificial intelligence…
Cornerstone InsightsSpain’s financial regulator publishes FAQs on DORA implementation: what you need to know
The Digital Operational Resilience Act (DORA) has applied across the EU since 17 January 2025.…
Subscribe to Cornerstone Counsel
Insights on technology, data, and digital law