Primary sources before opinions.

Spain's 2024-2025 acceleration plan, adding EUR1.5B to EUR600M already mobilized and organizing the agenda around AI capacity, adoption, and humanistic governance.

Readable official summary of the 2024 strategy, including ALIA, supercomputing, public and private-sector adoption, SMEs, and AESIA's ethical-governance role.

Spain’s national AI strategy published in 2020. A historical reference for the policy programme; it is not a statement that every measure or funding window remains current.

The broad digital transformation agenda that situates AI inside infrastructure, public-sector modernization, SME digitalization, skills, and digital rights.

The citizen-facing technology innovation lab for public administration, intended to test AI, data analytics, blockchain, and new service models.

Red.es programme for SME digital-advisory services, including AI and data. Programme information does not establish that applications are currently open; eligibility and deadlines belong to the relevant call.

Red.es digitalisation grant programme for small businesses and self-employed people. Retained as programme background, not as an announcement of an open funding window.

Bill 121/000096, published on 12 June 2026 and still in the amendment stage when checked on 20 September. Congress lists the amendment deadline as 23 September 2026 at 18:00 Madrid time. This is a parliamentary proposal, not an enacted law; the deadline may be extended.

AESIA’s institutional website: public information on its organisation, activities, guidance and responsibilities. Specific supervisory powers should be checked against the applicable legal text.

The legal basis for Spain's AI supervisory agency, including its supervision, advice, awareness, training, testing, coordination, and inspection functions.

Spain's rider-law amendment to the Workers' Statute, requiring worker representatives to be informed about algorithmic or AI systems affecting work conditions, access, retention, or profiling.

Spain’s 2021 Digital Rights Charter, a policy reference for rights in digital environments. It is not presented here as a statute creating standalone enforceable obligations.

A short explainer on the first ALIA models in Spanish and co-official languages, with useful context on the model family, methodology, datasets, and the infrastructure value behind public AI rather than consumer-model rankings.

Historical ONTSI report on AI adoption in 2024. Its figures describe the report’s reference period and population, not adoption in September 2026. Use the separately linked INE release for the dated 2025 comparison.

INE’s definitive release for 2024 and the first quarter of 2025, published on 22 October 2025. It reports AI use by 21.1% of businesses with at least 10 employees in the surveyed sectors in Q1 2025. This is not a September 2026 estimate or a measure of all Spanish businesses.

Spain's public-private venture-capital instrument for scaleups and funds in AI, cloud, IoT, cybersecurity, NLP, biometrics, and other high-impact digital technologies.

The training layer under Spain Digital: citizens, workers, public employees, vocational education, specialists, and gender gap reduction.

A Spain Digital measure to attract and retain AI talent, connecting researchers, companies, investment opportunities, scholarships, and job offers.

A useful pulse check on SME advisory uptake, noting thousands of grants and the role of AI, data analytics, cybersecurity, and business-performance advice.

A 2025 progress update on Spain's digital-skills plan, including public employees, teachers, citizens, professional associations, and AI-applied work training.

AESIA's 2026 public-interest agenda, starting with working lines on women and AI, disinformation and AI, minors and AI, and labor-market impacts.

A 2026 public-facing campaign for young people, families, and educators on AI use, digital safety, generated-content recognition, parental controls, and responsible classroom adoption.

INCIBE's citizen-facing guide to AI risks, including malicious use, phishing, malware generation, deepfakes, false profiles, and practical detection cues.

A practical deepfake primer from INCIBE, useful for media literacy, minors, fraud prevention, and democratic-resilience conversations.

A RETECH/INCIBE project to define control frameworks and risk-management methodology for AI systems against regulatory and cybersecurity expectations.

The broader security frame for AI-enabled threats, digital resilience, incident response, critical infrastructure, and Spain's national-security coordination.

AEPD's 2026 privacy recommendations for citizens using AI tools, including avoiding sensitive disclosures and understanding image and personal-data risks.

Spain's long-range AI foresight study: private-sector modernization, welfare state, sustainability, security and defence, and inequality through a 2040 horizon.

AESIA's framing of the foresight report, including the priority line to build AI verification and auditing tools through the supervisor.

A late-2025 marker for Spain's public AI trajectory: a larger language model adapted to Spain's linguistic and cultural context. The sober reading is infrastructure first: benchmark performance should be tracked, but it is not the whole public-value test.

The flagship public-language-model project: open AI resources for Spanish, Catalan/Valencian, Basque, and Galician. Read it as a multi-institution public data and language-infrastructure program, not as a claim to beat commercial frontier models.

AESIA’s dated note of 29 May 2026 on the Commission’s transparency and high-risk consultations. Kept as a record of participation in the guidance process, not as a current consultation notice.

Spain's pre-AI-Act sandbox, created to rehearse compliance for high-risk AI, general-purpose systems, and foundation-model-like systems before full EU enforcement.

The AEPD’s library of guidance and tools on data protection. Each guide has its own publication date, scope and status; guidance is not a substitute for the applicable law.

A 2026 AEPD guide on AI agents, autonomy, environmental interaction, and measures controllers and processors can use to manage data-protection risks.

The BSC AI Factory programme website, with information on computing access, services, training and support. Access terms are set by the relevant programme or call, not by this library entry.

The 2026 contract for the AI Factory upgrade, adding training and inference partitions, high-performance AI storage, and specialized software for industry, science, SMEs, startups, and public administration.

Official Spain Digital note on the Galicia-based AI Factory, which broadens Spain's compute story beyond Barcelona by linking CESGA, health, life sciences, public-interest AI, and EuroHPC capacity.

Practical access page for the BSC AI Factory's AI-ready compute resources, including the AI-optimized partition and support model.

Entry point to Spain's data-spaces agenda, including CRED and the plan to make sectoral data spaces part of AI-ready data infrastructure.

La Moncloa’s historical account of the 7 May 2026 trilogue agreement. The later enacted amendment is Regulation (EU) 2026/1744. This earlier press release does not establish the current application date or the final scope of the prohibition.

The Commission’s implementation timeline, read alongside Regulation (EU) 2026/1744. Article 50 generally applies from 2 August 2026; the amended calendar separates high-risk systems, new prohibitions and transitional provisions. Consult the legal text for the applicable case.

A compact map of the EU's excellence-and-trust approach, linking the AI Act with investment, AI factories, data, and adoption policy.

The Commission’s questions and answers on the AI Act. This explanatory guidance should be read alongside the applicable regulation and its amendments; it does not replace the legal text.

The 2024 AI Act as published in the Official Journal. For current obligations, read it together with amendments, including Regulation (EU) 2026/1744, and the relevant transitional provisions; the original publication is not a consolidated legal assessment.

The enacted amendment to the AI Act, published on 24 July 2026. It changes the application calendar, including Annex III high-risk requirements on 2 December 2027 and product-related Annex I requirements on 2 August 2028. New prohibitions and Article 50 transitions have their own dates.

The Commission's final Article 50 guidance on AI-interaction notices, machine-readable marking, deepfake labels, public-interest synthetic publications, and biometric or emotion-recognition disclosures.

The Commission's optional icon set for certain AI-generated or manipulated content. The icons can support Article 50 disclosure, but using them is not mandatory and does not establish compliance by itself.

Draft Commission guidance published on 19 May 2026 on Article 6 high-risk classification. Its consultation closed on 23 June 2026. The linked document is a draft, not a binding rule or evidence that a consultation remains open.

EuroHPC's official announcement naming Barcelona's BSC AI Factory as one of the first European AI Factories and linking Spain's capacity to the wider EU compute strategy.

The Commission’s overview of GPAI obligations, including documentation, copyright and training-content transparency, with additional evaluation, risk-management, incident-reporting and cybersecurity duties for systemic-risk models. Exceptions and transition periods must be checked in the regulation.

The voluntary GPAI Code of Practice supports compliance with the AI Act through chapters on transparency, copyright, and safety and security. Signing the code is not an independent safety certification or a replacement for legal obligations.

The Commission’s sectoral strategy for AI adoption, including SMEs and the public sector, open-source solutions and European AI supply. Its strategic aims should be distinguished from enforceable procurement rules and evidence of implementation.

The 2026 EuroHPC amendment enabling AI gigafactories, a next-step compute-policy issue for Spain as Europe scales from factories to world-class model infrastructure.

EuroHPC's explainer on large-scale AI facilities for next-generation model development, inference, storage, secure cloud environments, and specialized support services.

The Commission and EuroHPC competition to support a European frontier model with EuroHPC compute capacity, open outputs, and strategic autonomy goals.

The Commission’s April 2026 progress account for the AI Continent Action Plan, covering compute, data, skills and adoption. It is an institutional account of announced milestones, not an independent evaluation of their impact or a replacement for the regulatory framework.

A concise baseline for trustworthy AI policy: inclusive growth, human-centered values, transparency, robustness, security, safety, and accountability.

The global rights-and-values reference for public AI governance, covering proportionality, safety, fairness, sustainability, privacy, and human oversight.

The Council of Europe’s 2024 treaty framework on AI, human rights, democracy and the rule of law. The treaty text, signature, ratification and applicability in a particular country are distinct questions.

Spain's 2026 link to global AI governance: a UN lab based in Valencia to support AI governance work under the UN Office for Digital and Emerging Technologies.

The 2026 international scientific synthesis on general-purpose AI capabilities, misuse, loss of control and risk management. Read its evidence, uncertainties and disagreements separately from policy choices; it is not a certification of a particular model.

NIST’s November 2024 announcement of the International Network of AI Safety Institutes. This is a historical founding document, not a current membership register; it cannot establish whether a country belongs to the network in September 2026.

The 2023 international declaration, with Spain listed among represented countries, that frames frontier AI risks as international and calls for shared science, evaluation, transparency, and public-sector capability.

A practical risk-management bridge for public and private organizations: govern, map, measure, and manage AI risks, with a 2024 generative-AI profile and 2026 critical-infrastructure work in progress.

A non-technical course useful for policymakers, journalists, and civil servants who need a shared vocabulary before reading legal or technical sources.

Survey of AI researchers conducted in 2023, reporting respondents’ beliefs about progress and risks. Responses depend on the question wording and sample; they are elicited opinions, not observed frequencies or calibrated probabilities of future catastrophe.

METR’s March 2025 paper on task-completion horizons, reporting an approximately seven-month doubling trend over its historical sample. The result concerns the evaluated tasks and reliability threshold; it is not a forecast or proof of general job automation.

METR’s live task-horizon dashboard, showing 50% and 80% success thresholds. A horizon refers to task difficulty measured by human completion time, not how long an agent reliably works alone. The page’s displayed update is 8 May 2026; the current suite has limitations for tasks above 16 hours.

A policy-useful map of frontier capability benchmarks across reasoning, coding, agents, multimodality, and other domains, useful for avoiding single-score model hype.

Epoch AI's expert-level mathematics benchmark, designed to test advanced reasoning beyond saturated standard exams and to support more serious capability measurement.

The Nature paper for Humanity's Last Exam, a 2,500-question expert benchmark across subjects; useful because it shows both harder evaluation design and continuing uncertainty.

The Terminal-Bench contributors’ historical 2.0 release, published on 7 November 2025, for agentic work in terminal environments. The primary project lists subsequent versions, so 2.0 must not be treated as the latest release or compared across versions without qualification.

A benchmark for multimodal agents doing open-ended tasks in real computer environments; relevant to public-sector AI because autonomy increasingly means operating software, not just generating text.

A concrete evaluation toolkit for dangerous autonomous capabilities, including task-suite guidance and an example protocol for measuring agentic frontier-model risk.

OpenAI’s October 2023 announcement of its approach to frontier risk. Retained as historical primary-source material, not as the latest version of its framework or an independent assessment of the company’s models.

OpenAI’s Frontier Governance Framework, announced on 28 May 2026. It describes the company’s approach to severe risks, safety and security practices, reporting and emerging legal requirements. A company framework is not an independent audit or a finding of compliance.

Anthropic’s February 2026 announcement of RSP v3.0 and its Frontier Safety Roadmap approach. This is a dated statement of the company’s policies and goals, not independent evidence of model safety or a guarantee that the policy remains unchanged.

Google DeepMind’s dated announcement on its Frontier Safety Framework. It describes capability thresholds and risk-management practices proposed by the laboratory; it should not be read as an independent evaluation or a certification of compliance.

The 2023 Statement on AI Risk, recording its signatories’ concern about extreme AI risks. This is an advocacy statement, not a scientific estimate of probability, a legal rule or evidence that a particular model poses that level of risk.