A practical guide to employment law, AI hiring regulation and data-protection compliance for employers and jobseekers in Spain. Capital: Madrid. Population: 49.1 million (INE Continuous Population Statistics 1 January 2025).
Spain applies the EU regulatory stack on top of national labor and data-protection law. The following rules are the most relevant to recruitment, personality assessment and AI hiring tools:
Classifies AI systems used in employment, recruitment and worker management as 'high-risk' (Annex III §4). Employers using AI hiring tools must conduct conformity assessments, maintain technical documentation, ensure human oversight, and register systems in the EU database. High-risk obligations apply from 2 August 2026.
View Official Source →Amends the Spanish Workers' Statute to grant workers' representatives the right to be informed of the parameters, rules and instructions on which algorithms or AI systems used by the employer are based when they affect decision-making about access to or maintenance of employment, working conditions or profiling. Applies to all employers, not only platform companies.
View Official Source →EU-wide right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or significantly affects the data subject. Applies to fully-automated hiring rejections without meaningful human review.
View Official Source →Spain employers must comply with the EU AI Act (Regulation 2024/1689), which classifies AI hiring tools as 'high-risk' from 2 August 2026; GDPR Article 22 on automated decision-making; and Ley Rider, RD-ley 9/2021, art. 64.4(d) Estatuto de los Trabajadores.
Yes — pre-employment tests are legal in Spain when they are job-related, validated for predictive job performance, and do not produce disparate impact on protected groups. Under EU law, candidates in Spain have the right under GDPR Article 22 not to be subject to a fully-automated hiring decision without human review, and from 2 August 2026 the EU AI Act adds conformity-assessment obligations for employers using AI screening tools.
Spain employers must provide candidates with a clear privacy notice covering the lawful basis for processing personal data, retention periods, and any automated decision-making. Under the EU AI Act high-risk obligations applying from 2 August 2026, employers using AI hiring tools must also maintain technical documentation, ensure human oversight, and register the system in the EU database.
Spain treats personality assessments as personal data processing under GDPR. Employers need a lawful basis (typically legitimate interests after a balancing test, or explicit consent), must provide candidates with the privacy notice required by Article 13, and should run a Data Protection Impact Assessment when the assessment significantly affects the hiring decision.
Spain jobseekers have enforceable rights: protection from discrimination on protected grounds, the right to know whether an automated tool affected the hiring decision, the right to request human review, and the right to lodge a complaint with the national data protection authority (AEPD).
Use science-backed, audited assessments to hire fairly and compliantly in Spain.