Key data
| Regulation | Resolution of 8 July 2026, of the AEPD, approving the regulatory bases and convening the Award for the dissemination of the fundamental right to the protection of personal data on social media, for the year 2026 |
|---|---|
| Publication | 20 July 2026 |
| Entry into force | 20 July 2026 |
| Affected parties | Natural persons or collaborative groups residing in Spain with public profiles on social media about privacy and data protection |
| Category | Data Protection |
| Year | 2026 |
| Legal regime | Competitive concurrence under the General Subsidies Law |
| Required documentation | Report of up to 10 pages with active links to assessable content |
If you have a public profile on social media where you disseminate data protection or privacy, the Spanish Data Protection Authority (AEPD) formally recognizes that work with an award regulated by the General Subsidies Law. The call, published in the Official State Gazette of 20 July 2026, establishes the regulatory bases and opens the application period for 2026.
This is not merely an honorary recognition: as it is processed under competitive concurrence under the General Subsidies Law, the process has a formal character, with bases approved by resolution and objective evaluation criteria. This gives institutional solidity to the award and distinguishes it from other sectoral prizes.
What does this regulation establish?
The resolution simultaneously approves the regulatory bases of the award and its call for 2026. The key elements are as follows:
| Element | Detail |
|---|---|
| Purpose of the award | To recognize public profiles on social media that stand out for disseminating the fundamental right to the protection of personal data |
| Admitted social media | X (formerly Twitter), Instagram, LinkedIn or other social media platforms |
| Who can participate | Natural persons or collaborative groups residing in Spain |
| Who is excluded | AEPD employees and members of data protection authorities |
| Documentation to submit | Report of up to 10 pages with active links to assessable content |
| Prioritization criterion | Profiles that have contributed to raising awareness among citizens about their rights AND to data controllers about their obligations |
| Legal regime | Competitive concurrence under the General Subsidies Law |
| Deadline and amount | Regulated in accordance with the bases approved in this resolution |
The call especially values profiles that address two dimensions: the citizen perspective (their rights) and the data controller perspective (their obligations). A profile that only addresses one of the two approaches will score lower than one that covers both.
Economic and operational impact
The resolution does not specify the economic amount of the award in the published summary: the specific amount is regulated in the bases approved by the resolution. What is clear is that the award is processed as a public subsidy under the General Subsidies Law, which implies:
- The amount, if any, has the nature of a public subsidy and is taxed as income in the personal income tax of the awardee.
- The selection process is regulated and subject to appeal, with the guarantees inherent to an administrative procedure.
- The submission of the report with active links is a formal requirement: a report without links or with broken links may be grounds for exclusion.
From an operational perspective, the cost of participating is low (time spent drafting the report), but the reputational value for a consultant, lawyer, DPO or privacy disseminator specialist can be significant: the institutional backing of the AEPD is a first-level credential in the sector.
Who does it affect?
- Privacy lawyers and consultants with active presence on social media disseminating GDPR, LOPDGDD or digital rights.
- Data Protection Officers (DPOs) who publish educational content about their obligations and those of organizations.
- Journalists and communicators specialized in technology, privacy or digital rights.
- Collaborative groups (collectives, informal associations, communication teams) residing in Spain that manage thematic profiles on data protection.
- Teachers, researchers and academics who disseminate on social media beyond the university sphere.
Expressly excluded are AEPD employees and members of any data protection authority.
Practical example
Imagine a certified DPO who manages a LinkedIn and Instagram profile where they publish weekly threads explaining what rights citizens have in the event of a data breach, how to exercise the right to erasure, or what obligations a company has when hiring a data processor. Their content reaches both citizens (who learn their rights) and data controllers (who understand their obligations).
This profile fits perfectly within the prioritization criterion of the call: it covers the two valued dimensions. To submit an application, they will need to draft a report of up to 10 pages that includes active links to their most representative publications, describing the impact and dissemination approach of each one. The report is submitted within the deadline established in the regulatory bases approved by the resolution.
What should candidates do now?
- Verify that you meet the basic requirements: be a natural person or collaborative group residing in Spain, with a public profile on social media, and not be an employee of the AEPD or any data protection authority.
- Review the complete regulatory bases: the resolution approves the bases that detail deadlines, amount and evaluation criteria. Consult the full text in the Official State Gazette before preparing your application.
- Audit your published content: identify the most representative publications that demonstrate dissemination of both citizens' rights and data controllers' obligations, which are the two evaluation axes.
- Prepare the report: draft a document of up to 10 pages that includes active and functional links to your content. Verify that all links work before submitting.
- Submit your application within the deadline: the specific deadline is regulated in the bases approved by the resolution. Check the official call to avoid missing the deadline.
Frequently asked questions
Who can apply for the AEPD 2026 Award for dissemination on social media?
Natural persons or collaborative groups residing in Spain who have public profiles on social media (X, Instagram, LinkedIn or others) dedicated to disseminating the fundamental right to data protection can participate. AEPD employees and members of data protection authorities are excluded.
What documentation must be submitted for the AEPD Award application?
The application must include a report of up to 10 pages with active links to assessable content published on social media. This is a formal requirement: the links must be operational at the time of submission.
What type of content does the AEPD value most in this award?
Profiles that have contributed to raising awareness among both citizens about their rights and data controllers about their obligations are prioritized. A profile that addresses both perspectives has better chances than one that only addresses one of them.
What is the amount of the AEPD 2026 Award for dissemination on social media?
The specific amount of the award is regulated in the bases approved by the Resolution of 8 July 2026. The published summary does not specify the exact amount. To find out, it is necessary to consult the full text of the bases in the Official State Gazette (BOE-A-2026-15846).
Under what legal regime is this award processed?
The award is granted under competitive concurrence under the General Subsidies Law. This means that the process is regulated, with objective evaluation criteria and the guarantees inherent to a public administrative procedure.
Official source
Consult complete regulation in official source
Notice: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://www.boe.es/diario_boe/txt.php?id=BOE-A-2026-15846