Spain Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD) Art. 24: Process whistleblower data under the GDPR, this law and the whistleblower protection law

Article 24 (as amended by Ley 2/2023, in force 13 March 2023): processing needed to protect persons who report breaches of law is lawful and is governed by the GDPR, this law and the law protecting reporting persons and fighting corruption (Ley 2/2023).

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Specific processing situations (Title IV) – Spain Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD)

Art. 19 Process business contact data of employees, sole traders and professionals under the legitimate interest presumption
Art. 20 Report debts to credit information systems only under the Article 20 conditions
Art. 21 Share data for mergers and business transfers only as needed, and erase at once if the deal fails
Art. 22 Run video surveillance proportionately: minimal public-street capture, one-month deletion, visible notice sign
Art. 23 Consult published advertising exclusion (Robinson) lists before direct marketing, unless the person consented

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Spain Organic Law 3/2018 on Data Protection and Digital Rights (LOPDGDD) controls