- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)
- Corrigendum to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC
- Organic Law 3/2018, of 5 December, of Protection of Personal Data and guarantee of digital rights (BOE, December 6, 2018)
- Organic Law 15/1999, of 13 December, of Protection of Personal Data (in force in the cases referred to in the fourteenth additional Provision and in the fourth Transitional Provision of Organic Law 3/2018, of 5 December (BOE, 14 December 1999).