AI adoption drives data breaches in retail and regulatory scrutiny in Spain

A report from Netskope Threat Labs indicates that confidential data accounts for 56% of AI policy violations in the retail sector. Other significant breaches include source code (20%) and passwords or API keys (16%). The report highlights a rapid increase in AI adoption, with the proportion of employees actively using AI applications rising from 39% to 65% in one year.

In Spain, regulatory scrutiny regarding AI in the workplace is intensifying. The Spanish Data Protection Agency (AEPD) recently issued a warning to a company regarding the use of AI for screening and evaluating job candidates, emphasizing the need for transparency and human supervision.

Additionally, Royal Decree 723/2026, which transposes the European directive on transparent working conditions, will come into effect on October 5. This decree introduces new information requirements for employment contracts exceeding four weeks, specifically requiring disclosure regarding the use of algorithmic or automated decision-making systems that affect working conditions.