Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights.
Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation).
Royal Decree 1720/2007, of 21 December, approving the Regulation implementing Organic Law 15/1999, of 13 December, on the Protection of Personal Data.
Law 14/2007, of 3 July, on Biomedical Research.
Law 41/2002, of 14 November, basic law regulating patient autonomy and rights and obligations regarding clinical information and documentation.