Data Protection

Appointment of Ana Palacios Morillo: what changes in data policy 2026

E
Equipo Editorial CambiosLegales
26 Mar 2026 6 min 6 views

Key facts

RegulationReal Decreto 244/2026, of 24 March
BOE Publication26 March 2026
Entry into force24 March 2026
Position appointedDirector General of Data
Person appointedAna Palacios Morillo
Those affectedTechnology companies, public bodies and data-intensive sectors
CategoryData Protection / Data Governance
Year2026
Key impact: Ana Palacios Morillo takes over as Director General of Data from 24 March 2026, the body that regulates and supervises the use of public and private data in Spain. There are no immediate obligations, but this appointment marks a new direction in data policy that will affect technology companies, artificial intelligence initiatives and any sector operating with large volumes of data.

The Dirección General del Dato holds the reins of public policy on the data economy, information reuse and regulatory compliance supervision in the field of data in Spain. A change in its leadership is not a minor administrative formality: it is a signal of where regulation will be heading in the coming years.

Real Decreto 244/2026, published in the BOE on 26 March 2026, formally appoints Ana Palacios Morillo as the new Director General of Data. The appointment takes effect from 24 March 2026.

What does this regulation establish?

Real Decreto 244/2026 is an appointment act: it formally designates Ana Palacios Morillo to lead the Dirección General del Dato. In itself, it does not amend any previous regulation nor does it introduce new obligations for businesses or citizens.

What matters is not the decree itself, but what it represents: new leadership at the body that defines the priorities of data policy in Spain. The Dirección General del Dato has competences over:

  • Governance of public and private data in Spain
  • Regulation and supervision of data use
  • Data reuse and data economy initiatives
  • Guidance on artificial intelligence policy linked to data
  • Regulatory compliance in the field of data for businesses and public bodies

Each change of leadership at this body may imply a shift in interpretation criteria, inspection priorities or the regulatory projects promoted by the Government.

Economic and operational impact

This appointment does not generate direct costs or immediate new administrative burdens. However, it has real operational implications that businesses must anticipate:

  • Change in regulatory criteria: A new director general may reorient supervision priorities, the sectors under greater scrutiny or the interpretation criteria of current data regulations.
  • New regulatory initiatives: The Dirección General del Dato is the driving force behind draft laws and regulations on data matters. A change in leadership may accelerate, slow down or redirect ongoing initiatives on the data economy or artificial intelligence.
  • Impact on public data reuse projects: Companies whose business model is based on accessing and reusing public data must be alert to possible changes in the conditions or priorities for open data.
  • Regulatory compliance in AI: Companies that develop or deploy artificial intelligence systems in Spain must closely follow the guidelines issued by this directorate, as they will influence applicable compliance requirements.

Who is affected?

The appointment has practical relevance for the following profiles:

  • Technology companies that operate with large volumes of data or develop products based on artificial intelligence
  • Public bodies subject to data regulation and reuse of public sector information
  • Data-intensive sectors: banking, insurance, healthcare, telecommunications, retail and logistics
  • Companies that reuse public data as the basis of their business model or product
  • Compliance officers and DPOs who must anticipate changes in data policy
  • Specialist advisors and consultants in data protection, data economy and artificial intelligence

Practical example

A healthcare data analytics company operating in Spain that bases part of its activity on access to public datasets from the national health system should consider the following:

With the appointment of Ana Palacios Morillo, the Dirección General del Dato may redefine the conditions for accessing and reusing that data, the technical anonymisation requirements demanded, or the priority sectors on the open data agenda. If the new director general promotes stricter regulation on the use of health data for commercial purposes, this company could be required to review its data access contracts, its internal processing procedures and its agreements with the public sector.

There is no quantifiable cost today, but the risk of not monitoring the guidelines issued by this directorate is being exposed to regulatory changes without time to adapt.

Do you need to track this and other regulations?

View the full details on CambiosLegales

What should businesses do now?

  1. Identify whether your company operates in data-intensive sectors (technology, healthcare, banking, insurance, telecommunications) to assess the level of exposure to regulatory changes arising from this appointment.
  2. Activate monitoring of the Dirección General del Dato guidelines: communications, public consultations, regulatory projects and supervision criteria issued by the body under its new leadership.
  3. Review internal data economy and artificial intelligence projects to identify areas that could be affected by a change in regulatory criteria.
  4. Alert the compliance team and the DPO about this change in leadership and the need to monitor the regulatory agenda on data matters throughout 2026.
  5. Consult specialist advisors in data protection and the data economy if your company has ongoing projects that depend on the reuse of public data or the development of AI systems in Spain.

Frequently asked questions

What is the Dirección General del Dato and what are its competences?

The Dirección General del Dato is the key body for the governance of public and private data in Spain. It influences the regulation, reuse and supervision of data use, and sets the direction for data economy and artificial intelligence initiatives in the country.

What does the appointment of Ana Palacios Morillo mean for businesses?

The appointment may imply changes in criteria or priorities in data policy. It does not generate immediate direct obligations, but it marks the future direction of public policy on data matters, affecting data economy initiatives, artificial intelligence and regulatory compliance.

When does Real Decreto 244/2026 on the appointment enter into force?

Real Decreto 244/2026 entered into force on 24 March 2026, two days before its official publication in the BOE, which took place on 26 March 2026.

Which sectors should follow the new Director General of Data's guidelines most closely?

Technology companies, public bodies and data-intensive sectors are the most directly affected. Also companies subject to data regulation in the field of artificial intelligence and the reuse of public data.

Does Real Decreto 244/2026 generate immediate obligations for my company?

It does not generate immediate direct obligations. However, it marks the future direction of public policy on data matters, so technology companies and those operating with large volumes of data must monitor the guidelines issued by this directorate.

Official source

View the full regulation at the official source

Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, please consult a qualified professional. Source: https://www.boe.es/diario_boe/txt.php?id=BOE-A-2026-6986



Share:
E
Equipo Editorial CambiosLegales

El equipo editorial de CambiosLegales analiza diariamente los cambios normativos que afectan a empresas y autónomos en España, ofreciendo análisis pro...

Comments

No comments yet. Be the first to comment!

Leave a comment