Data Protection Monitor
Global Privacy & Data Protection Intelligence

Spain (ES) · Module Detail

Spain: Data Subject Rights

#

Full GDPR rights catalogue in force; AEPD publishes accessible guidance confirming scope, including minors' rights from age 14.

Primary frameworkGDPR Arts 12-22 + LOPDGDD Arts 12-18
Traffic-light rationale — GreenFull GDPR rights catalogue in force; AEPD publishes accessible guidance confirming scope, including minors' rights from age 14.

Sub-modules (5)

Access RightGreen

Right of access under GDPR Art 15 applies; AEPD confirms minors over 14 may exercise it themselves.

Claims (1):

  • GDPR grants data subjects the rights of access, rectification, erasure, objection, portability, restriction of processing, and the right to object to automated decision-making including profiling; AEPD confirms these are exercisable by minors from age fourteen.

Rectification And ErasureGreen

Rights of rectification and erasure (Arts 16-17) form part of the standard rights catalogue confirmed by AEPD.

Claims (1):

  • GDPR grants data subjects the rights of access, rectification, erasure, objection, portability, restriction of processing, and the right to object to automated decision-making including profiling; AEPD confirms these are exercisable by minors from age fourteen.

Restriction And ObjectionGreen

Rights to restriction of processing and objection, including objection to automated decision-making/profiling, are confirmed in AEPD's minors-and-education guidance as part of the exercisable rights catalogue.

Claims (1):

  • GDPR grants data subjects the rights of access, rectification, erasure, objection, portability, restriction of processing, and the right to object to automated decision-making including profiling; AEPD confirms these are exercisable by minors from age fourteen.

Data PortabilityGreen

Portability right (Art 20) is included among the rights AEPD confirms as exercisable, including by minors from age 14.

Claims (1):

  • GDPR grants data subjects the rights of access, rectification, erasure, objection, portability, restriction of processing, and the right to object to automated decision-making including profiling; AEPD confirms these are exercisable by minors from age fourteen.

Deadlines And Response WindowsAmber

No ES-specific deviation from the GDPR Art 12(3) one-month (extendable to three) response window was located in this research pass; GDPR default applies directly.

Absence provenance: unavailable. Searched: AEPD plazo respuesta derechos RGPD un mes.

Category narrative34 words

GDPR Arts 15-22 rights (access, rectification, erasure, restriction, objection, portability, and objection to automated decision-making/profiling) apply directly in Spain and are reiterated in AEPD consumer-facing guidance, including specifically in the context of minors' data.

no periodic updates on record for this sub-brief

Sources and claims (1)
  1. ConfirmedAgencia Española de Protección de Datos — GDPR grants data subjects the rights of access, rectification, erasure, objection, portability, restriction of processing, and the right to object to automated decision-making including profiling; AEPD confirms these are exercisable by minors from age fourteen.observed