> ## Documentation Index
> Fetch the complete documentation index at: https://docs.botbrains.io/llms.txt
> Use this file to discover all available pages before exploring further.

# AI Cold Calling Laws in Spain

> Is AI cold calling legal in Spain? Consent rules for automated calls under Ley 11/2022, the Lista Robinson, the 400 prefix, call recording, and AI disclosure.

export const reviewed_0 = "October 2026"

In Spain, an AI agent may only make marketing calls to people and businesses who agreed beforehand. Article 66.1.a of the General Telecommunications Law ([Ley 11/2022](https://www.boe.es/buscar/act.php?id=BOE-A-2022-10757#a6-8)) requires prior consent for automated marketing calls, with no exception for companies or existing customers. From October 17, 2026, marketing calls must also come from a number in the new 400 range.

<Note>
  This page summarizes the law as of {reviewed_0} to help you plan AI phone calls. It isn't legal advice. Laws and how regulators apply them change, so check your use case with a lawyer before you start a campaign.
</Note>

## At a glance

| Call | To consumers (B2C) | To businesses (B2B) |
| - | - | - |
| Inbound service call | <Icon icon="circle-check" color="#16a34a" /> Allowed. Disclose the AI and offer a human. | <Icon icon="circle-check" color="#16a34a" /> Allowed. Disclose the AI. |
| Outbound service call | <Icon icon="circle-check" color="#16a34a" /> Allowed. No sales pitch. | <Icon icon="circle-check" color="#16a34a" /> Allowed |
| Marketing callback the person asked for | <Icon icon="circle-check" color="#16a34a" /> Allowed. The request is the consent. | <Icon icon="circle-check" color="#16a34a" /> Allowed. The request is the consent. |
| Marketing call by an AI agent | <Icon icon="signature" color="#d97706" /> Consent required, also from existing customers | <Icon icon="signature" color="#d97706" /> Consent required, also from existing customers |
| Marketing call by a human to existing customers | <Icon icon="circle-check" color="#16a34a" /> Allowed unless registered, for similar products | <Icon icon="circle-check" color="#16a34a" /> Allowed unless registered, for similar products |
| Cold marketing call by a human | <Icon icon="signature" color="#d97706" /> Consent required, or legitimate interest after contact in the past year | <Icon icon="circle-check" color="#16a34a" /> Allowed unless registered, if the offer relates to the contact's work |

<Warning>
  **Two deadlines are close.** From October 17, 2026, carriers block marketing calls from numbers outside the 400 range. By December 28, 2026, [large companies and providers of basic services](#sector-rules) must let callers reach a human during automated service calls.
</Warning>

## Is AI cold calling legal in Spain?

Only with prior consent. Article 66.1.a gives every end user the right not to receive "llamadas automáticas sin intervención humana" (automated calls without human intervention) for commercial purposes without prior consent. End users include companies (Annex II, points 82 and 83), so B2B calls need consent too. For consumers, [Article 96.3 of the consumer law (TRLGDCU)](https://www.boe.es/buscar/act.php?id=BOE-A-2007-20555#a96) requires express consent. The legitimate interest route in [AEPD Circular 1/2023](https://www.boe.es/buscar/act.php?id=BOE-A-2023-15071) doesn't apply to automated calls (Art. 1.2).

**An AI agent likely counts as automated.** No court or regulator has ruled on conversational AI. The [AEPD FAQ](https://www.aepd.es/preguntas-frecuentes/5-publicidad-no-deseada/FAQ-0502-llamadas-automatizadas-sin-intervencion-humana-con-fines-comerciales) names a prerecorded message as its example, but the legal test is human intervention, and an AI agent talks without a human. The customer service law ([Ley 10/2025, Art. 8.2](https://www.boe.es/buscar/act.php?id=BOE-A-2025-26698#a8)) also groups "bots conversacionales" with answering machines. A human who supervises or could take over doesn't change this. Treat AI calls as automated.

## Cold calls by a human

Since June 29, 2023, Article 66.1.b requires consent or another GDPR legal basis for every marketing call. Circular 1/2023 accepts only legitimate interest as that basis:

| Condition | Circular 1/2023 |
| - | - |
| Document a balancing test before you start. | Art. 3 |
| Without a contract, request, or contact in the past year, the AEPD doesn't presume the person expects your call. | Art. 3 |
| Don't dial numbers generated at random. | Art. 2 |
| Screen the Lista Robinson. | Art. 4 |
| Calls to employees, sole traders, and professionals about their work count as lawful unless shown otherwise ([LOPDGDD Art. 19](https://www.boe.es/buscar/act.php?id=BOE-A-2018-16673#a1-11)). | Art. 5 |

So B2B calls by a human work without consent, and cold calls to consumers need it.

## Existing customers and callback requests

**Existing customers.** For calls by a human, the AEPD presumes legitimate interest when you offer your own products similar to what the customer bought (Circular 1/2023, Art. 3). This doesn't extend to other companies in your group. Article 66.1.a has no customer exception, so AI calls need consent.

**Callback requests.** A request for a callback is consent to that call, so make the form say that an AI agent will call. Ads that lead to a landing page with such a form work well.

## Do-not-call register: Lista Robinson

| Question | Answer |
| - | - |
| Who runs it? | [Adigital](https://www.listarobinson.es), under [LOPDGDD Art. 23](https://www.boe.es/buscar/act.php?id=BOE-A-2018-16673#a2-5) |
| What does it cover? | Calls, SMS, email, and post. Only natural persons register, including sole traders, so company switchboards aren't on it. |
| When must you screen? | Before every campaign to people who didn't consent to your calls. A check is valid for one month. |
| What does it cost? | Free for small companies up to 30,000 records a year, then from EUR 1,900 a year ([prices](https://www.listarobinson.es/empresas)). |

You don't need to screen people who consented to your calls (LOPDGDD Art. 23.4), so the list matters mostly for calls by a human.

## Consent for AI calls

Consent must be voluntary, specific, informed, and unambiguous ([GDPR Art. 4(11) and 7](https://eur-lex.europa.eu/eli/reg/2016/679/oj)). It must cover automated calls, not just calls, and name your company ([EDPB Guidelines 05/2020](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-052020-consent-under-regulation-2016679_en)).

You must prove who consented, when, how, for what, and what text they saw. In [PS/00249/2025](https://www.aepd.es/documento/ps-00249-2025.pdf), a company called purchased leads. It couldn't show the privacy policy behind the checkboxes or tie the entry to the person, so the AEPD found no valid consent.

| Topic | What to do |
| - | - |
| Purchased lists | Get the vendor's consent text, form, and per-contact evidence, and check them before you call. |
| Calls for a partner | Name the partner at the start. The company that orders the calls answers for its call centers ([PS/00059/2020](https://www.aepd.es/documento/ps-00059-2020.pdf)). |
| Retention and expiry | No fixed periods. Keep evidence for three years after the last call. Consent violations become time-barred after three years ([LOPDGDD Art. 72](https://www.boe.es/buscar/act.php?id=BOE-A-2018-16673#a7-4)) and telecom ones after two ([Art. 113](https://www.boe.es/buscar/act.php?id=BOE-A-2022-10757#a1-25)). |

botBrains asks for consent evidence before automated marketing campaigns, see [before you start outbound campaigns](/concepts/phone/countries#before-you-start-outbound-campaigns).

## Tell callers they're talking to an AI

Since August 2, 2026, [Article 50 of the EU AI Act](https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=OJ:L_202401689#art_50) requires that people know they're talking to an AI system, at the latest when the conversation starts. This applies to inbound and outbound calls, to consumers and to business contacts, and you can't count on the exception for obvious cases when your AI agent sounds human. The [default introduction](/concepts/phone#introductions) already says that your AI agent is an AI, so keep that statement first when you edit it. When you call a consumer to sell something, the [Consumer Rights Directive](https://eur-lex.europa.eu/eli/dir/2011/83/oj/eng) also requires you to name your company, anyone you call for, and the commercial purpose at the start.

Spanish law adds rules for the start of every marketing call:

| Requirement | Source |
| - | - |
| Say who you are, on whose behalf you call, and that the call is commercial. | TRLGDCU Art. 96.2, [Circular 1/2023, Art. 6](https://www.boe.es/buscar/act.php?id=BOE-A-2023-15071#a6) |
| Say that the person can object to further calls, and act on any clear "don't call me" right away. | Circular 1/2023, Art. 6 |
| On a first offer, tell consumers they can object and get a reference number for the objection. Keep objections for a year. | TRLGDCU Art. 96.5 |

Use [guidance](/concepts/guidance) to tell the agent how to handle objections, and a [Unitool](/concepts/unitools) to write them to your CRM.

**Inbound calls.** Customer service lines for consumers must offer a human, not only automated means ([TRLGDCU Art. 21.2](https://www.boe.es/buscar/act.php?id=BOE-A-2007-20555#a21)). By December 28, 2026, a human operator at [companies covered by Ley 10/2025](#sector-rules) must answer 95% of requests for a human within three minutes on average (Art. 8). Forward these callers to a colleague.

**Languages.** Use Spanish. Consumers in Catalonia can choose Catalan ([Catalan Consumer Code, Art. 128-1](https://www.boe.es/buscar/act.php?id=BOE-A-2010-13115#a1281)).

Outbound marketing call in Spanish, then Catalan:

```text theme={null}
Hola, le habla {agent_name}, un agente de inteligencia artificial de {project_name}. Le llamo con fines comerciales para presentarle una oferta de {project_name}. La llamada se graba. Pulse la tecla asterisco en cualquier momento para oponerse a la grabación. Si no desea recibir más llamadas comerciales, dígamelo y no volveremos a llamarle. ¿Tiene un momento?
```

```text theme={null}
Hola, li parla {agent_name}, un agent d'intel·ligència artificial de {project_name}. Li truco amb finalitat comercial per presentar-li una oferta de {project_name}. La trucada s'enregistra. Premi la tecla asterisc en qualsevol moment per oposar-se a l'enregistrament. Si no vol rebre més trucades comercials, digui-m'ho i no li tornarem a trucar. Té un moment?
```

Inbound call in Spanish, then Catalan:

```text theme={null}
Hola, le atiende {agent_name}, un agente de inteligencia artificial de {project_name}. La llamada se graba. Pulse la tecla asterisco en cualquier momento para oponerse a la grabación. Si prefiere hablar con una persona, dígamelo. ¿En qué puedo ayudarle?
```

```text theme={null}
Hola, li parla {agent_name}, un agent d'intel·ligència artificial de {project_name}. La trucada s'enregistra. Premi la tecla asterisc en qualsevol moment per oposar-se a l'enregistrament. Si prefereix parlar amb una persona, digui-m'ho. En què el puc ajudar?
```

## Call recording

Recording a call you take part in isn't a crime ([STC 114/1984](https://hj.tribunalconstitucional.es/es/Resolucion/Show/367)). Intercepting other people's calls is ([Criminal Code Art. 197](https://www.boe.es/buscar/act.php?id=BOE-A-1995-25444#a197)). Consent isn't the only option. You need a GDPR legal basis, such as legitimate interest, and a notice at the start (GDPR Art. 6 and 13). The voice is biometric data only when you process it to identify the speaker (GDPR Art. 4(14) and 9). The AEPD recommends recording marketing calls as proof of compliance (Circular 1/2023, Art. 6).

The default botBrains [introduction](/concepts/phone#introductions) gives the notice. If the caller presses the star key, botBrains stops the recording and discards it, and the transcript stays. botBrains stores recordings, transcripts, and call data in the EU.

## Caller ID and calling hours

| Rule | Source |
| - | - |
| Use an identifiable number for marketing calls. | TRLGDCU Art. 96.5, [Unfair Competition Act Art. 29.2](https://www.boe.es/buscar/act.php?id=BOE-A-1991-628#a29) |
| Since June 7, 2025, don't use Spanish mobile numbers for marketing or customer service. | [Orden TDF/149/2025, Art. 9](https://www.boe.es/buscar/act.php?id=BOE-A-2025-2870) |
| From October 17, 2026, make marketing calls only from outbound-only 400 numbers. Carriers may let people block them all. | [Resolution of April 14, 2026](https://www.boe.es/buscar/act.php?id=BOE-A-2026-8409), [Ley 10/2025, Art. 16](https://www.boe.es/buscar/act.php?id=BOE-A-2025-26698#a1-8) |
| Call consumers only from 9:00 to 21:00 on weekdays, never on public holidays. | TRLGDCU Art. 96.2 |

The 400 resolution ties the duty to companies covered by Ley 10/2025, but the [government presents it](https://www.lamoncloa.gob.es/serviciosdeprensa/notasprensa/transformacion-digital-y-funcion-publica/paginas/2026/160426-prefijo-400-llamadas-comerciales.aspx) as a rule for all marketing calls. Use a 400 number for every marketing call.

The caller sees your botBrains number. botBrains provisions local numbers on request, so tell us if you need one for marketing. botBrains doesn't enforce calling hours or screen lists, so you handle both.

## Sector rules

| Sector | Rule |
| - | - |
| Electricity and gas | <Icon icon="circle-check" color="#16a34a" /> Allowed under the general rules. We found no specific ban on phone sales. The sector ban covers unsolicited door-to-door advertising or contracting ([Ley 24/2013, Art. 46.1](https://www.boe.es/buscar/act.php?id=BOE-A-2013-13645#a46) and [Ley 34/1998, Art. 81.2](https://www.boe.es/buscar/act.php?id=BOE-A-1998-23284#a81)). |
| Companies covered by Ley 10/2025\*: customer service calls | <Icon icon="circle-check" color="#16a34a" /> Allowed with an AI agent. Callers can ask for a human at any time, also at the start of the call. From December 28, 2026, a human operator must answer 95% of those requests within three minutes on average, and give their name (Art. 8). |
| Companies covered by Ley 10/2025\*: sales on a call about a service interruption | <Icon icon="circle-x" color="#dc2626" /> Prohibited. Don't sell to customers who call about a service interruption (Art. 16.2). |
| Companies covered by Ley 10/2025\*: an offer that fixes the interruption | <Icon icon="circle-check" color="#16a34a" /> Allowed when the offer fixes the interruption and improves the customer's terms (Art. 16.2). |
| Financial services | Disclose the parameters and data behind offers personalized by automated decisions ([Unfair Competition Act Art. 27.9](https://www.boe.es/buscar/act.php?id=BOE-A-1991-628#a27)). |
| Any sale on a call you start | Confirm the offer in writing. The consumer only commits after signing or accepting in writing ([TRLGDCU Art. 98.6](https://www.boe.es/buscar/act.php?id=BOE-A-2007-20555#a98)). |

\* [Ley 10/2025](https://www.boe.es/buscar/act.php?id=BOE-A-2025-26698#a2) covers two groups of companies in Spain. The first group is providers of basic services of any size: water, gas, and electricity, passenger transport, postal services, electronic communications, and financial services. The second group is companies in any other sector that sell to consumers and, in the previous financial year, had at least 250 employees, more than EUR 50 million in turnover, or more than EUR 43 million on the balance sheet. One of these thresholds is enough. Smaller companies in other sectors aren't covered.

## Fines and enforcement

| Regulator | Enforces | Maximum fine |
| - | - | - |
| [AEPD](https://www.aepd.es) | Call consent, Lista Robinson, GDPR | EUR 2 million per serious infringement of Ley 11/2022 ([Art. 107.30 and 109](https://www.boe.es/buscar/act.php?id=BOE-A-2022-10757#a1-21)). GDPR: EUR 20 million or 4% of turnover. |
| Consumer authorities | Calling hours, call openings, phone contracts, Ley 10/2025 | EUR 1 million or eight times the illicit profit ([TRLGDCU Art. 49](https://www.boe.es/buscar/act.php?id=BOE-A-2007-20555#a49)) |
| CNMC and the ministry | Number rules | Serious infringement (Art. 107.19), and a ban on using the number for up to two years (Art. 109.4) |

**Notable cases.** In 2021, the AEPD fined Vodafone EUR 8.15 million for its partners' marketing calls and messages, including calls to people on the Lista Robinson ([PS/00059/2020](https://www.aepd.es/documento/ps-00059-2020.pdf)). In 2026, it fined solar installer Más Sol Energía EUR 10,000 for calling a purchased lead without valid consent and not saying where the data came from. The person's own recording was the evidence ([PS/00249/2025](https://www.aepd.es/documento/ps-00249-2025.pdf)). We found no Spanish case on AI agents or robocalls.

## Sources

* [Ley 11/2022, General de Telecomunicaciones](https://www.boe.es/buscar/act.php?id=BOE-A-2022-10757), Art. 66.1, 107, 109, 113, final provision 6, Annex II
* [AEPD Circular 1/2023 on Article 66.1.b](https://www.boe.es/buscar/act.php?id=BOE-A-2023-15071), Art. 1 to 6
* [AEPD FAQ on automated calls without human intervention](https://www.aepd.es/preguntas-frecuentes/5-publicidad-no-deseada/FAQ-0502-llamadas-automatizadas-sin-intervencion-humana-con-fines-comerciales)
* [Ley 10/2025 on customer service](https://www.boe.es/buscar/act.php?id=BOE-A-2025-26698), Art. 2, 8, 16, transitional provision
* [Real Decreto Legislativo 1/2007 (TRLGDCU)](https://www.boe.es/buscar/act.php?id=BOE-A-2007-20555), Art. 21, 49, 96, 98
* [Ley Orgánica 3/2018 (LOPDGDD)](https://www.boe.es/buscar/act.php?id=BOE-A-2018-16673), Art. 19, 23, and 72
* [Lista Robinson](https://www.listarobinson.es) and its [company terms](https://www.listarobinson.es/empresas)
* [Orden TDF/149/2025](https://www.boe.es/buscar/act.php?id=BOE-A-2025-2870), Art. 9 and 10
* [Resolution of April 14, 2026 on the 400 range](https://www.boe.es/buscar/act.php?id=BOE-A-2026-8409) and the [government press release](https://www.lamoncloa.gob.es/serviciosdeprensa/notasprensa/transformacion-digital-y-funcion-publica/paginas/2026/160426-prefijo-400-llamadas-comerciales.aspx)
* [Ley 3/1991 de Competencia Desleal](https://www.boe.es/buscar/act.php?id=BOE-A-1991-628), Art. 27.9 and 29.2
* [Ley 22/2010, Código de consumo de Cataluña](https://www.boe.es/buscar/act.php?id=BOE-A-2010-13115), Art. 128-1
* [Ley 24/2013 del Sector Eléctrico](https://www.boe.es/buscar/act.php?id=BOE-A-2013-13645), Art. 46.1 s and t, and [Ley 34/1998 de Hidrocarburos](https://www.boe.es/buscar/act.php?id=BOE-A-1998-23284), Art. 81.2 r and s
* [Constitutional Court, STC 114/1984](https://hj.tribunalconstitucional.es/es/Resolucion/Show/367), and the [Criminal Code](https://www.boe.es/buscar/act.php?id=BOE-A-1995-25444), Art. 197
* [GDPR](https://eur-lex.europa.eu/eli/reg/2016/679/oj), Art. 4, 6, 7, 9, 13, and [EDPB Guidelines 05/2020 on consent](https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-052020-consent-under-regulation-2016679_en)
* AEPD resolutions [PS/00059/2020 (Vodafone)](https://www.aepd.es/documento/ps-00059-2020.pdf) and [PS/00249/2025 (Más Sol Energía)](https://www.aepd.es/documento/ps-00249-2025.pdf)

## Next steps

<Columns cols={2}>
  <Card title="Phone integration" icon="phone" href="/concepts/phone">
    Set up your phone line, introductions, and outbound calls.
  </Card>

  <Card title="Calling laws by country" icon="globe" href="/concepts/phone/countries">
    Compare consent rules for AI calls across the EU, the UK, and the US.
  </Card>
</Columns>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.