Spain’s Bold Move: Stricter Regulations on AI and Deepfakes

Spain Approves AI Bill With Heavy Fines for Unlabeled Deepfakes

Spain has become one of the first member countries of the European Union to implement its AI Act, approving a new AI bill that outlines significant penalties for unlabeled AI-generated content, particularly deepfakes.

The bill, which addresses various malicious AI practices, specifies that the failure to properly label any AI-generated or manipulated content that depicts real or nonexistent individuals is considered a serious infringement. According to Spain’s Ministry of Digital Transformation, such content must be identified as AI-generated “in a clear and distinguishable manner no later than the time of the first interaction or exposure,” aligning with the regulations set forth in the EU AI Act.

EU AI Act Overview

Initially introduced in 2021, the EU AI Act underwent extensive deliberation before being passed in March 2024. It came into force in member states in August 2024 and will be fully applicable by August 2, 2026, allowing entities time to comply with its requirements.

The Act establishes risk-based rules that AI developers and deployers must follow regarding specific AI applications and prohibits the commercialization of certain AI uses. One notable provision prohibits the use of biometric data for training algorithms utilized in criminal profiling by law enforcement, marking a significant step towards minimizing bias in AI technologies. However, exemptions for national security and border control agencies have raised concerns about balancing security and individual rights.

Key Provisions of the Spanish AI Bill

The Spanish AI bill stipulates fines of up to 35 million euros or 7% of a company’s global annual turnover for improper labeling of AI content. Additionally, fines may be imposed for the failure to implement human supervision of AI systems that use biometrics for various industrial applications, with penalties ranging from €500,000 to €7.5 million or between 1% and 2% of global turnover.

AI and Deepfake Regulation in India

In contrast, AI regulation in India remains inconsistent, with the government oscillating between establishing a comprehensive AI framework and maintaining a light-touch regulatory approach. Recently, the Indian government proposed the creation of an AI Governance Board to oversee and authorize AI applications, but deepfake regulation has not been adequately addressed.

During the last general and state elections, numerous political figures and parties misused deepfakes for misinformation campaigns. In response, the Indian government reiterated the existing IT rules, with some officials suggesting that legislation regarding deepfakes may emerge if deemed necessary.

This development in Spain highlights the increasing global scrutiny and regulatory efforts aimed at managing the implications of AI technology, particularly concerning deepfake content and its potential misuse in various contexts.

More Insights

CII Advocates for Strong AI Accountability in Financial Services

The Chartered Insurance Institute (CII) has urged for clear accountability frameworks and a skills strategy for the use of artificial intelligence (AI) in financial services. They emphasize the...

Regulating AI in APAC MedTech: Current Trends and Future Directions

The regulatory landscape for AI-enabled MedTech in the Asia Pacific region is still developing, with existing frameworks primarily governing other technologies. While countries like China, Japan, and...

New York’s AI Legislation: Key Changes Employers Must Know

In early 2025, New York proposed the NY AI Act and the AI Consumer Protection Act to regulate the use of artificial intelligence, particularly addressing algorithmic discrimination in employment...

Managing AI Risks: Effective Frameworks for Safe Implementation

This article discusses the importance of AI risk management frameworks to mitigate potential risks associated with artificial intelligence systems. It highlights various types of risks, including...

Essential Insights on the EU Artificial Intelligence Act for Tech Companies

The European Union has introduced the Artificial Intelligence Act (AI Act), which aims to manage the risks and opportunities associated with AI technologies across Europe. This landmark regulation...

South Korea’s Landmark AI Basic Act: A New Era of Regulation

South Korea has established itself as a leader in AI regulation in Asia with the introduction of the AI Basic Act, which creates a comprehensive legal framework for artificial intelligence. This...

EU AI Act and DORA: Mastering Compliance in Financial Services

The EU AI Act and DORA are reshaping how financial entities manage AI risk by introducing new layers of compliance that demand transparency, accountability, and quantifiable risk assessments...

AI Governance: Bridging the Transatlantic Divide

Artificial intelligence (AI) is rapidly reshaping economies, societies, and global governance, presenting both significant opportunities and risks. This chapter examines the divergent approaches of...

EU’s Ambitious Plan to Boost AI Development

The EU Commission is launching a new strategy to reduce barriers for the deployment of artificial intelligence (AI) across Europe, aiming to enhance the region's competitiveness on a global scale. The...