AESIA — Spanish AI Supervisory Authority and EU AI Act Enforcement

Definición

Definición técnica

AESIA (Agencia Española de Supervisión de la Inteligencia Artificial) is Spain’s national artificial intelligence supervisory authority, established under Royal Decree 729/2023 and operationally active since 2024. It is Spain’s designated Market Surveillance Authority for the EU AI Act and is one of the first dedicated national AI regulatory agencies in the European Union, established proactively ahead of EU AI Act enforcement requirements.

AESIA’s mandate encompasses multiple functions: supervision and enforcement of the EU AI Act within Spain; operation of Spain’s AI regulatory sandbox (one of the first in the EU); promotion of responsible AI adoption; coordination with other national authorities (data protection, financial, health regulators); and participation in EU-level coordination through the European AI Board. AESIA also provides guidance documentation and consultation services for organizations seeking to understand their obligations under the EU AI Act.

For organizations operating in the Spanish market — whether Spanish-domiciled or foreign organizations with Spain-facing AI systems — AESIA is the primary regulatory contact for EU AI Act compliance questions, sandbox applications, and enforcement interactions.

Por qué importa operativamente

AESIA matters for organizations operating in Spain because it is the authority that will investigate complaints, conduct market surveillance inspections, and impose fines for EU AI Act violations in the Spanish market. Organizations developing or deploying AI systems that are used in Spain — including foreign companies with Spanish users or operations — are subject to AESIA’s oversight.

AESIA’s early establishment and active regulatory program means that Spain is ahead of most EU member states in AI regulatory infrastructure. Organizations that want to engage proactively with the Spanish AI regulator — through the sandbox, guidance requests, or voluntary compliance notifications — have a functional authority to engage with. For organizations seeking to demonstrate leadership in AI governance to Spanish clients, investors, or regulators, ISO/IEC 42001 certification and Zertia’s ANAB accreditation provide the most structured evidence of governance quality.

Marco regulatorio / Regulatory Framework

Framework	AESIA role
EU AI Act	AESIA is the designated Market Surveillance Authority for the EU AI Act in Spain. It has inspection, sanctioning, and guidance competences under the Regulation.
AI Regulatory Sandbox (Spain)	AESIA operates Spain’s AI regulatory sandbox, one of the first in the EU. Organizations can apply to participate through aesia.gob.es.
AEPD coordination	AESIA coordinates with the Spanish Data Protection Agency (AEPD) for AI systems also subject to GDPR.
European AI Board	AESIA participates in the European AI Board, the coordination mechanism between national AI authorities of Member States.

Cómo lo evalúa Zertia

Zertia operates in the Spanish market and coordinates with AESIA on AI governance matters. For organizations in Spain preparing for AESIA oversight or seeking sandbox participation, Zertia’s EU AI Act Assessment and ISO/IEC 42001 certification provide the structured compliance evidence that AESIA inspections and the sandbox admission process look for. Zertia is also in process of obtaining ENAC accreditation (Spain/EU) to complement its existing ANAB accreditation.

→ [EU AI Act Assessment] · ISO 42001 Certification — [zertia.ai/services]

CTA

AESIA is Spain’s EU AI Act enforcement authority. If your AI systems operate in the Spanish market, AESIA’s oversight applies. Zertia’s assessment and certification prepare you for regulatory engagement.

Contact · Schedule a call · Learn More