The Regulator Was Ready: Spain’s AEPD Logs the First AI-Agent Breach Notification Under GDPR

The AEPD Breach Filing Spain’s Agencia Española de Protección de Datos (AEPD) received its first formal notification of a data breach involving an autonomous AI agent on September 14, 2026. Deputy Director Francisco Pérez Bes published the disclosure on the agency’s blog the following day. This filing marks the transition of agentic AI risk from […]