Legislation
The Ley Orgánica 3/2018, de 5 de diciembre, de Protección de Datos Personales y garantía de los derechos digitales (Organic Law 3/2018, from 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights; short: Organic Law 3/2018) entered into force on 7 December 2018. It repealed the Royal Decree-Law 5/2018 from July 27 and Organic Law 15/1999, except for a few regulations for the police and judicial sector that remain in force for the latter.
Guidelines of the supervisory authority
Guidelines are available on the official website of the Spanish Personal Data Protection Agency (Agencia Española de Protección de Datos), and several articles on data protection matters can be found on AEPD’s blog.