Digital Trust PractitionersAssociation of Digital Trust Practitioners · TrustPractitioners.org
JoinJoin
REGULATORY WATCH BRIEF Moderate 48 🧭 Regulatory Guidance published

AEPD publishes technical guidance on data accuracy and minimisation in AI processing

The guidance clarifies how GDPR data‑quality obligations apply to AI, helping organisations balance protection with AI development.

ADTP Regulatory Watch · July 21, 2026 · Agencia Española de Protección de Datos
ImpactModerate 48
Type🧭 Regulatory Guidance
Statuspublished enacted, check the effective date
JurisdictionEU-ES

What happened

The Spanish Data Protection Agency (AEPD) released a technical note interpreting the GDPR accuracy and data‑minimisation principles for AI‑driven personal data processing. It provides criteria for controllers, processors and DPOs to assess data quality, relevance and bias throughout the AI lifecycle. The guidance stresses proportional application of accuracy based on treatment purpose and recommends governance measures.

Why it matters for trust and compliance

  • Its status is published. It is enacted but may not be in force yet. Check the effective date before planning around it.
  • The guidance clarifies how GDPR data‑quality obligations apply to AI, helping organisations balance protection with AI development.

Who is affected

controller processor

Recommended actions

  1. Check that privacy notices describe the practices this addresses.
  2. Revisit retention schedules and data minimisation for the data involved.
  3. Inventory AI or automated decision systems in scope and their assessments.