The Regulator Was Ready: Spain’s AEPD Logs the First AI-Agent Breach Notification Under GDPR The AEPD Breach Filing Spain’s Agencia Española de Protección de Datos (AEPD) received its first formal notification of a data breach involving an autonomous AI agent on4, 2026. Deputy ... Published: 2026-09-17