— Edition 1.247 33 verified trackers
ES EN
Politics · Technology · Digital regulation  ·  where data speaks before headlines
Snapshot data
AML/OFAC enforcement against banks and fintech — 455 penalties documented 455 AML/OFAC penalties documented across 177 countries and 401 regula… CNMC Spain · the Digital Services Coordinator g… — 6 documented milestones 6 milestones in Spain's DSA Coordinator rollout; as of May 2026 still… Corporate data breaches: from incident to response — 7 breaches documented 7 corporate data breaches documented by notification conduct and outc… Digital regulatory risk index by country — 16 countries profiled 16 countries profiled by digital regulatory risk (coverage expanded w… DMA · designated gatekeepers and real compliance — 8 documented DMA acts 8 acts in the DMA gatekeeper regime: 7 designated, first final fines … Global election risk 2026: democracy and digita… — 22 elections profiled 22 2026 elections profiled by political regime (EIU) and digital envi… Electoral digital integrity 2026 — 13 elections profiled 13 elections profiled by digital integrity; 5 with transparent politi… Documented electoral disinformation 2026 — 5 documented campaigns 5 electoral disinformation campaigns or patterns documented with open… GDPR · which national authority really sanctions — 9 authorities profiled 9 national authorities profiled; ~€7.1bn in GDPR fines since 2018, bu… Digital political ad spending 2026 — 5 country-platform observ… 5 observations of digital political ad spending in 2026 elections, me… US · the state AI regulation patchwork — 8 laws and milestones 8 laws and milestones in the US AI patchwork; with no comprehensive f… Climate: the gap between pledge and action — 12 countries assessed 12 countries assessed by the Climate Action Tracker: 10 with insuffic… Power and corruption in the courts in Ibero-Ame… — 29 documented cases 29 senior officials prosecuted for corruption across 19 countries, wi… Crypto industry: collapses, sanctions and convi… — 10 documented cases 10 crypto-sector collapse, sanction and conviction cases across 4 cou… Content moderation: appeals and reversals — 19 documented decisions 19 appealed and reviewed moderation decisions, with their policy, ori… AI harms in court — litigation, rulings and set… — 100 documented cases 100 litigated AI-harm cases across 25 jurisdictions on 5 continents, … Public AI spending — global government contracts — 50 documented contracts 50 public AI contracts across 15 jurisdictions on 5 continents (45 wi… Scandal → conviction gap — — milestones logged Series starting — Odebrecht/Lava Jato as base case Technology ↔ regulation gap — 25 regulatory milestones 25 milestones across 11 jurisdictions; gaps from 0 to 22 years; Chile… Campaign promises → fulfillment — 29 term evaluations 29 terms evaluated across 25 countries on five continents Digital fines actually imposed — 60 sanctions recorded 60 high-value sanctions across 17 jurisdictions and 6 continents; cov… EU AI Act — designation of national authorities — 3 / 27 Member States Art. 70 deadline expired 2 Aug 2025 — process still open AI Act · Notified bodies for conformity assessment — 1 body with AI-specific a… Designation process opened 2 Aug 2025 · high-risk deadline Aug 2026 AI Act · Sanctions regime and its actual enforc… — 0 documented AI Act fines… Only 3 of 27 MS with both authorities designated by early 2026 EU · Consolidated DSA enforcement decisions — €120M first DSA fine · X · 5 … 5 Member States referred to CJEU for insufficient DSC implementation LATAM · Digital spending in 2026 electoral camp… — $14.794M COP · highest declared … Only 8 of 13 campaigns had reported in Cuentas Claras by mid-May Ibero-America · documented public contracts wit… — 3 contracts verified with… DC registry kickoff · ongoing monthly manual sweep LATAM · Internet shutdowns and platform blocks — 7 documented events · 202… Venezuela concentrates the region's most severe blocks LATAM · Judicial and regulatory sanctions on pl… — $5,2M USD · fine on X Corp. i… X complied with the orders and was reinstated after 39 days of suspen… Commercial spyware: documented cases worldwide — 22 documented cases 22 verified commercial-spyware cases across 12 countries on four cont… RSF · Press freedom in Latin America — 144 worst regional rank (Pe… AR -11 · PE -14 · SV -8 · EC -31 · USA -7 LATAM · AI bills in legislative process — 150+ bills identified Niubox January 2026 — only 4 Iberoamerican countries with law in force AML/OFAC enforcement against banks and fintech — 455 penalties documented 455 AML/OFAC penalties documented across 177 countries and 401 regula… CNMC Spain · the Digital Services Coordinator g… — 6 documented milestones 6 milestones in Spain's DSA Coordinator rollout; as of May 2026 still… Corporate data breaches: from incident to response — 7 breaches documented 7 corporate data breaches documented by notification conduct and outc… Digital regulatory risk index by country — 16 countries profiled 16 countries profiled by digital regulatory risk (coverage expanded w… DMA · designated gatekeepers and real compliance — 8 documented DMA acts 8 acts in the DMA gatekeeper regime: 7 designated, first final fines … Global election risk 2026: democracy and digita… — 22 elections profiled 22 2026 elections profiled by political regime (EIU) and digital envi… Electoral digital integrity 2026 — 13 elections profiled 13 elections profiled by digital integrity; 5 with transparent politi… Documented electoral disinformation 2026 — 5 documented campaigns 5 electoral disinformation campaigns or patterns documented with open… GDPR · which national authority really sanctions — 9 authorities profiled 9 national authorities profiled; ~€7.1bn in GDPR fines since 2018, bu… Digital political ad spending 2026 — 5 country-platform observ… 5 observations of digital political ad spending in 2026 elections, me… US · the state AI regulation patchwork — 8 laws and milestones 8 laws and milestones in the US AI patchwork; with no comprehensive f… Climate: the gap between pledge and action — 12 countries assessed 12 countries assessed by the Climate Action Tracker: 10 with insuffic… Power and corruption in the courts in Ibero-Ame… — 29 documented cases 29 senior officials prosecuted for corruption across 19 countries, wi… Crypto industry: collapses, sanctions and convi… — 10 documented cases 10 crypto-sector collapse, sanction and conviction cases across 4 cou… Content moderation: appeals and reversals — 19 documented decisions 19 appealed and reviewed moderation decisions, with their policy, ori… AI harms in court — litigation, rulings and set… — 100 documented cases 100 litigated AI-harm cases across 25 jurisdictions on 5 continents, … Public AI spending — global government contracts — 50 documented contracts 50 public AI contracts across 15 jurisdictions on 5 continents (45 wi… Scandal → conviction gap — — milestones logged Series starting — Odebrecht/Lava Jato as base case Technology ↔ regulation gap — 25 regulatory milestones 25 milestones across 11 jurisdictions; gaps from 0 to 22 years; Chile… Campaign promises → fulfillment — 29 term evaluations 29 terms evaluated across 25 countries on five continents Digital fines actually imposed — 60 sanctions recorded 60 high-value sanctions across 17 jurisdictions and 6 continents; cov… EU AI Act — designation of national authorities — 3 / 27 Member States Art. 70 deadline expired 2 Aug 2025 — process still open AI Act · Notified bodies for conformity assessment — 1 body with AI-specific a… Designation process opened 2 Aug 2025 · high-risk deadline Aug 2026 AI Act · Sanctions regime and its actual enforc… — 0 documented AI Act fines… Only 3 of 27 MS with both authorities designated by early 2026 EU · Consolidated DSA enforcement decisions — €120M first DSA fine · X · 5 … 5 Member States referred to CJEU for insufficient DSC implementation LATAM · Digital spending in 2026 electoral camp… — $14.794M COP · highest declared … Only 8 of 13 campaigns had reported in Cuentas Claras by mid-May Ibero-America · documented public contracts wit… — 3 contracts verified with… DC registry kickoff · ongoing monthly manual sweep LATAM · Internet shutdowns and platform blocks — 7 documented events · 202… Venezuela concentrates the region's most severe blocks LATAM · Judicial and regulatory sanctions on pl… — $5,2M USD · fine on X Corp. i… X complied with the orders and was reinstated after 39 days of suspen… Commercial spyware: documented cases worldwide — 22 documented cases 22 verified commercial-spyware cases across 12 countries on four cont… RSF · Press freedom in Latin America — 144 worst regional rank (Pe… AR -11 · PE -14 · SV -8 · EC -31 · USA -7 LATAM · AI bills in legislative process — 150+ bills identified Niubox January 2026 — only 4 Iberoamerican countries with law in force
/ trackers / cnmc-spain-dsa-enforcement
Spain · DSA enforcement

CNMC Spain · the Digital Services Coordinator gap (DSA)

Verifiable timeline of the deployment of Spain's National Markets and Competition Commission (CNMC) as Digital Services Coordinator under Regulation (EU) 2022/2065 (DSA). The tracker measures a concrete gap: the distance between the coordinator's formal designation (January 2024) and its real enforcement. As of May 2026 that gap remains open: the legal enabling was repealed, the European Commission opened infringement proceedings against Spain, and the CNMC has still not approved its sanctioning regime nor certified trusted flaggers nor imposed its own DSA sanctions. Each record documents a milestone with its status and official source.

Snapshot · May 26, 2026
6
documented milestones
↑ 6 milestones in Spain's DSA Coordinator rollout; as of May 2026 still no operational sanctioning regime despite the January 2024 designation

Evolution

Data analysis

Statistical readings derived from the attributes of each recorded case. All figures come from the documented events; amounts are computed only over cases with a sum expressed in the indicated currency, without converting between currencies.

Milestone status

The outcome of each milestone: completed, repealed, pending or under infringement proceedings.

Milestone type

The nature of each act: designation, legal enabling, sanctioning regime, supervision.

Milestones per year

Temporal distribution of the Coordinator deployment milestones in Spain.

Reading the data

Spain designated the CNMC as its Digital Services Coordinator in January 2024. Two years later, that coordinator still cannot sanction: the legal enabling was repealed, Brussels opened infringement proceedings and the sanctioning regime remains unapproved. This tracker measures that gap between having the authority named and having it operational.

YV
Yaneth Vickari S. · Digital regulation expert · Madrid
May 26, 2026 · 5 min read

The European Digital Services Act requires each member state to name a national authority —the Digital Services Coordinator— to supervise and sanction the platforms established in its territory. Spain completed the formality in January 2024: it designated the National Markets and Competition Commission, with powers to impose fines of up to 6% of large platforms' global turnover. On paper, an authority with teeth.

The problem is what happened next, and it is exactly what this tracker documents. The designation was not enough: a legal enabling was needed to expand the CNMC's powers and resources. That enabling, agreed in December 2024, lapsed weeks later when the decree containing it was not ratified. The European Commission, which monitors DSA application, opened infringement proceedings against Spain. And by April 2026 the Government was still processing a new bill to make operational a coordinator named two years earlier.

Of the six documented milestones in the Spanish DSA Coordinator's rollout, only one —the initial designation— is marked 'completed'. The rest are pending, repealed, under supervision or under European infringement proceedings. The authority exists on the org chart; enforcement, not yet.

The gap that matters for the platforms

This distinction —between a designated authority and one that sanctions— is exactly the kind of nuance a compliance team, a law firm or a platform needs, and which the headline 'Spain already has a DSA coordinator' hides. For a platform established in Spain, the operational question is not whether a coordinator exists, but whether that coordinator can open a case and fine it today. As of May 2026, the answer remains nuanced: the CNMC supervises and cooperates with Brussels —as in the Temu monitoring— but its full national sanctioning capacity is not consolidated.

What Spain illustrates is not an isolated case, but the pattern running through all of Diálogo Ciudadano's trackers: the distance between the law passed and the law applied. The DSA is among the world's most ambitious digital rules, but its force depends on each state activating its coordinator. Documenting that activation milestone by milestone —with its status and source— turns a regulatory promise into a verifiable data point of real enforcement.

Methodology note

The tracker gathers verifiable milestones in the CNMC's rollout as Digital Services Coordinator, with their status (completed, pending, repealed, under supervision, under infringement proceedings) and their source (CNMC, BOE, legal analyses, fact-checking media). It distinguishes between formal designation and real sanctioning capacity. It does not record sanctions that are not on record as final. The charts are computed from each milestone's attributes.

It is informational infrastructure, not legal advice. The rollout status updates as the legislative process advances.

Documented events (6)

April 8, 2026 ES confirmed

By April 2026 the Government processes a new bill to formally enable the CNMC

The PSOE files a bill in Congress to enable the CNMC as coordinator and provide it with staff and resources. Two years after the designation, the coordinator still does not operate with full sanctioning powers.

June 1, 2025 ES confirmed

The CNMC monitors Temu's compliance, under investigation by the European Commission

In 2025 the CNMC monitors the compliance of Temu, a platform investigated by the European Commission over the sale of illegal products affecting Spanish consumers. The action is supervisory and cooperative, with no final national sanction.

February 1, 2025 ES confirmed

The European Commission opens infringement proceedings against Spain over incomplete DSA application

After a reasoned opinion, the European Commission gives Spain two months to remedy the shortcomings in the coordinator's effective designation, under threat of taking the case to the EU Court of Justice.

January 28, 2025 ES confirmed

The CNMC's legal enabling lapses and is reintroduced via Royal Decree-law 1/2025

The CNMC's formal enabling, agreed in December 2024, lapsed when the decree containing it was not ratified. The Council of Ministers approves RDL 1/2025 on 28 January to reintroduce the powers, amid parliamentary instability.

December 1, 2024 ES confirmed

By late 2024 the CNMC has still not approved the sanctioning regime nor certified trusted flaggers

Despite the designation, the CNMC has not approved the applicable sanctioning regime nor certified trusted flaggers nor out-of-court dispute bodies: real sanctioning capacity is not operational.

January 24, 2024 ES confirmed

The Ministry for Digital Transformation designates the CNMC as Digital Services Coordinator

Spain complies with DSA Article 49.3 by designating the CNMC as national coordinating authority, with powers of supervision, investigation and sanction of up to 6% of large platforms' global turnover.

Methodology

Type
event-log
Construction
DC editorial construction
Cadence
event-driven

Sources consulted

  1. CNMC · sección Servicios Digitales (DSA) ↗ official

    Official CNMC page on its DSA role. Publishes press releases when it issues resolutions. It has no aggregated dashboard of sanctions imposed.

  2. Boletín Oficial del Estado (BOE) ↗ official

    Administrative resolutions with sanctioning effects are published in the BOE. Manual biweekly search for 'CNMC' and 'digital services'.

  3. CNMC · designación como Coordinador Servicios Digitales ↗ official

    CNMC press release of 24 January 2024 on its formal designation as DSC under Regulation (EU) 2022/2065.

  4. Real Decreto-ley 1/2025 de 28 enero · régimen sancionador DSA España ↗ official

    RDL 1/2025 introduces the DSA sanctions regime after the repeal of RDL 9/2024 by Congress in January 2025. Fines of up to 6% of the provider's annual worldwide turnover.

Related pieces