The Spanish Data Protection Authority (AEPD) has published recommendations and announced a series of actions aimed at promoting a common compliance model regarding data protection within the public sector.

Derived from consultations conducted with the General State Administration (AGE) and Data Protection Officers (DPOs), these recommendations emphasize strengthening the role of the DPO. The AEPD highlights that its effectiveness depends on its hierarchical position, visibility, access to management bodies, and functional independence. It is recommended that the DPO be involved early in projects involving data processing, such as the development of standards or public contracting, to integrate data protection by design.

Additionally, the AEPD will develop several tools in collaboration with the DPOs, including a data protection policy model and a good practices manual. A dedicated space will be created on its website to centralize useful resources. The authority also plans to intensify the publication of its legal opinions, strengthen training in partnership with the National Institute of Public Administration (INAP), and create exchange networks. Special attention will be given to the challenges posed by artificial intelligence.