Spain plans to strengthen its cyber defenses and oversight of advanced AI models under a new policy program that also targets October approval of data-center regulations.
Prime Minister Pedro Sánchez presented the IA360 plan Monday, setting out a 12-month program covering computing infrastructure, business adoption, education and employment. He called for closer supervision of frontier models with offensive capabilities and stronger national defenses against AI-assisted attacks.
The proposed data-center rules cover energy use, environmental sustainability, resilience and digital sovereignty. The draft royal decree has entered public consultation, with approval planned for October, according to Europa Press’s account of the government’s roadmap.
That account also sets out an October pilot involving financial institutions and supervisors to test a quantum cybersecurity shield. Measures planned for October and November include preparations for post-quantum cryptography and urgent action against offensive AI.
The plan envisages an initial budget of about €300 million for a 2027 procurement program supporting the development of quantum technologies and defenses against offensive AI before commercial deployment. The spending and implementation dates remain targets in the government’s roadmap.
Spain also intends to bid for an EU-backed AI gigafactory, a large computing facility for training and running advanced models. The proposal envisages €5 billion in public and private investment. If it secures EU approval, the government aims to start construction in February 2027 and have 100,000 AI accelerators operating in 2028 or 2029.
Sánchez also highlighted work with the Barcelona Supercomputing Center on AI models for climate, health and energy. He said data-center projects should protect natural resources and preserve control over the data they hold.
Spain’s data protection authority has separately received its first notification of a personal-data breach reportedly carried out using an AI agent. The affected organization described an agent logging into a system, searching for vulnerabilities and accessing invoices.
In its September 14 account, the AEPD cautioned that the notification needed further analysis before it could draw conclusions. The agency urged organizations to include AI-assisted attacks in risk assessments, shorten response times and review the permissions attached to accounts and other credentials.
IA360 also includes an AI voucher for small businesses and self-employed workers. Sánchez said the government wants more than half of Spanish businesses to use AI in their operations by 2030. Secondary-school and vocational curricula would be adapted to teach responsible use while protecting students’ learning.
Employers and unions will be invited to talks in October on an agreement addressing AI’s effects on employment and daily life. Sánchez said political parties and public authorities should also take part.
Sources: La Moncloa, Europa Press, AEPD
–
By the Control Plane Editorial Team