GPSR Compliance in Spain
Spain has the highest potential GPSR fines in the EU — up to €600,000 per serious violation. Here's what online stores need to know about GPSR compliance for the Spanish market.
€600,000
Max fine (serious)
€300
Min fine (minor)
#5 market
EU ecommerce rank
26 million
Online shoppers ES
Who enforces GPSR in Spain?
Spain's enforcement structure is more decentralised than other EU countries, with shared responsibility between national agencies and regional authorities.
National coordination
Ministerio de Consumo
The Ministry of Consumer Affairs sets national consumer protection policy and coordinates GPSR implementation at the national level.
Regional enforcement
CCAA (Autonomous Communities)
Spain's 17 autonomous communities each have consumer protection departments that conduct market surveillance and issue fines within their territory.
Data protection + cookies
AEPD
The Agencia Española de Protección de Datos enforces GDPR and the LOPD-GDD. Actively fines non-compliant cookie consent implementations.
Border control
Aduanas (Customs)
Spanish customs coordinates with EU border authorities to intercept non-compliant products at import entry points.
Spain has the highest GPSR fines in the EU
Under the General Consumer and User Protection Act (TRLGDCU), serious violations can result in fines up to €600,000. Spain classifies violations as minor (€300–€3,000), serious (€3,001–€15,000), or very serious (€15,001–€600,000). Repeated violations can result in double the fine.
Spain-specific compliance requirements
These requirements combine GPSR obligations with Spanish consumer law (TRLGDCU) and digital services law (LSSI) requirements.
Spanish-language product information
CRITICALSafety warnings, usage instructions, and manufacturer contact details must be in Spanish (castellano). Spain's General Consumer Protection Act reinforces this. For regional markets (Catalonia, Basque Country, Valencia), consider adding regional language versions.
Manufacturer or responsible person details
CRITICALName, business address, and electronic contact of the manufacturer (or EU responsible person) must be visible on product pages. Non-EU sellers must appoint an EU-based responsible person and identify them on product pages.
Product traceability reference
CRITICALA model number, lot number (número de lote), or serial number must appear on each product page to enable regulatory traceability.
Aviso legal (legal notice)
CRITICALSpanish law (LSSI - Ley de Servicios de la Sociedad de la Información) requires an "Aviso Legal" page with company name, NIF/CIF (for Spanish companies), registered address, and contact details. This must be easily accessible from every page.
Cookie consent (LOPD-GDD)
CRITICALSpain's organic data protection law (LOPD-GDD) transposes GDPR. The AEPD (Spanish data protection authority) requires opt-in cookie consent with clear categories. The AEPD has issued fines specifically for non-compliant cookie banners.
Right of withdrawal (14 days)
IMPORTANTSpanish consumer law requires a clear 14-day withdrawal right notice and model withdrawal form in all distance sales. This must be provided pre-purchase and confirmed in the order confirmation.
Check your compliance for the Spanish market
Run a free GPSR + EAA compliance scan. Get a severity-ranked report of what needs fixing to avoid fines from the CCAA or AEPD.
Scan your store for free
Enter any page URL from your store. Your homepage is a good starting point.
No account required · Results in ~60 seconds · First scan free
Frequently asked questions
Who enforces GPSR in Spain?
GPSR in Spain is enforced by the regional autonomous community consumer protection departments (CCAA), coordinated at the national level by the Ministry of Consumer Affairs. The AEPD handles cookie consent and data protection enforcement separately.
What are the GPSR fines in Spain?
Spain has the highest GPSR penalties in the EU. Under the TRLGDCU, minor violations: €300–€3,000; serious violations: €3,001–€15,000; very serious violations: €15,001–€600,000. Repeated violations can double the fine.
Does GPSR require Spanish-language product information?
Yes. Product safety information must be in Spanish (castellano). For stores targeting Catalonia, the Basque Country, or Valencia, regional language requirements may additionally apply under those communities' consumer protection laws.
What is the LSSI and does it apply to my store?
The LSSI (Ley de Servicios de la Sociedad de la Información) is Spain's e-commerce and digital services law. It applies to any business offering services online to Spanish users, including foreign companies. It requires an Aviso Legal page with company identification information.