Digital Law and Technology Lawyer in Spain

Digital regulation changes every quarter. Does your company have a plan to comply?

We provide comprehensive digital law advice for companies operating in technology-driven and highly regulated environments. From the AI Act to the GDPR, from MiCA to NIS2: one law firm for all your digital compliance.

Request a free initial assessment. We’ll review your regulatory position, identify compliance gaps and propose a roadmap tailored to your business.

No commitment · We reply the same day

    YEARS OF EXPERIENCE

    + 0

    CLIENTS ADVISED

    + 0

    PROJECTS COMPLETED

    + 0

    PRACTICE AREAS

    + 0

    WHAT SETS US APART

    One Law Firm for All Your Digital Law Needs

    We reply the same day

    DIGITAL LAW SERVICES

    What Does Your Company Need?

    Comprehensive legal advice on digital law and new technologies for companies operating in regulated and competitive environments.

    We support startups, scaleups and tech companies from product design to scale-up. We review the regulatory viability of new digital business models and design the legal structure to operate with legal certainty.

    We advise on compliance with the GDPR, the AI Act, the MiCA Regulation, the NIS2 Directive, DORA, the DSA, the DMA and Spanish digital services legislation. A single legal point of contact for the whole European regulatory framework.

    We help traditional companies digitalise their processes with legal certainty: electronic contracts, digital signatures, digital identity, eCommerce platforms and process automation with legal implications.

    We design digital compliance programmes that bring together data protection, cybersecurity, intellectual property and sector regulations in a single regulatory risk management framework.

    We advise on data governance, algorithmic ethics, transparency in automated decisions and the design of responsible technology use policies in line with European standards.

    SECTORS AND COMPANIES

    Does Your Company Operate Online?

    We advise companies in the following sectors on every aspect of digital law.

    SaaS and Platforms

    Large-scale processing of user data

    Fintech

    Financial data and credit scoring

    Digital Health

    Clinical and patient data

    eCommerce and Marketplaces

    Purchase and behavioural data

    Startups and Scaleups

    Scaling with data from day one

    PROCESS AND TIMELINES

    How We Work

    From the first call to compliance, in 4 steps

    1 –

    Initial assessment

    We carry out a full regulatory assessment of your company: which regulations affect you, where the compliance gaps are and what the priorities are. Free of charge and with no commitment.

    2 –

    Risk assessment

    We identify specific risks in each area: data protection, AI, cybersecurity, intellectual property, eCommerce and technology contracts.

    3 –

    Compliance plan

    We design a comprehensive compliance roadmap: policies, contracts, protocols and technical documentation for every regulation that applies to your business.

    4 –

    Ongoing support

    We update your compliance programme as EU regulation evolves and keep you informed of the regulatory changes that affect your sector.

    REVIEWS AND RATINGS

    What Our Clients Say

    Reviews from real clients and companies about our digital law and new technologies services.

    Dimas Pérez
    1 review
    Marta combines impeccable professionalism with a remarkable ability to explain complex legal concepts in simple terms...
    Roberto Fernandez
    3 reviews
    Impeccable personal attention, availability and human touch. Broad knowledge and experience in the sector. Outstanding at solving problems. 100% recommended...
    Alina
    1 review
    I have no words to express my sincere gratitude. Marta is a very dedicated and empathetic professional. She also works fast...
    Gregorio Gigorro
    1 review
    Thank you so much, Marta, for your invaluable advice. Without your knowledge of NFT technology in the art market, a new and promising field but one exposed to a lot of fraud, I would have got myself into serious trouble. Marta …

    REGULATORY FRAMEWORK

    Digital Law and New Technologies in Spain and the EU

    Companies operating online are subject to an ever-growing European regulatory framework. The main laws include the General Data Protection Regulation (GDPR), the Artificial Intelligence Act (AI Act, Regulation 2024/1689), the Markets in Crypto-Assets Regulation (MiCA, Regulation 2023/1114), the NIS2 Cybersecurity Directive, the Digital Services Act (DSA) and the Digital Markets Act (DMA).

    In Spain, the LOPDGDD, the Information Society Services Act (LSSI-CE), the General Telecommunications Act and sector regulations complement the European framework. The Spanish Data Protection Agency (AEPD), the CNMV, the Bank of Spain and AESIA are the supervisory authorities in their respective fields.

    Compliance with these rules is not optional and the penalties are significant: up to EUR 20 million for GDPR infringements, up to EUR 35 million under the AI Act, up to EUR 10 million under NIS2 and up to 6% of worldwide turnover for DSA infringements.

    FAQ

    Frequently Asked Questions on Digital Law and New Technologies

    It depends on your activity. At the very least, the GDPR affects every company that processes personal data. If you use AI, the AI Act. If you deal in crypto-assets, MiCA. If you are an online platform, the DSA. If you provide essential services, NIS2. A regulatory assessment identifies exactly which rules apply to you and what your obligations are.

    Digital law requires simultaneous knowledge of several EU regulations, technical understanding of the systems being regulated and the ability to design solutions that work both legally and operationally. A generalist corporate lawyer can cover company law matters, but the obligations under the GDPR, the AI Act, MiCA or NIS2 require combined technical and legal knowledge.

    It is an internal framework that brings all of a company’s digital regulatory obligations into a single management system: policies, procedures, contracts, training and control mechanisms. Instead of complying with each regulation separately, a digital compliance programme manages them in a coordinated way, reducing duplication and costs.

    It depends on how complex the project is from a regulatory point of view. An initial regulatory assessment can be done as a free consultation. A basic compliance programme (GDPR + website legal texts + core contracts) can start at affordable fees for startups. Innovatech offers quotes tailored to the size and stage of the company.

    The Digital Services Act (DSA) sets transparency, content moderation and user protection obligations for online platforms, marketplaces and search engines operating in the EU. Platforms with more than 45 million users have enhanced obligations. Fines can reach 6% of worldwide turnover.

    Yes. Innovatech covers data protection, artificial intelligence, blockchain and crypto-assets, tech intellectual property, eCommerce, software contracts, cybersecurity and digital rights. One law firm, one point of contact, one comprehensive view of your regulatory compliance.

    REQUEST YOUR ASSESSMENT

    Request a free initial assessment and receive a regulatory assessment of your company, the gaps detected and a compliance roadmap.