Spanish protection of data obey. Question about a possible Sue against your company
Is this the same as the EU data protection directive?  The good news is that it doesn't go in to force until mid-2018, so you've got a bit of time to figure it out.