Alethexis
  • Pricing
  • Trust

Stay ahead of the AI Act

Regulatory analysis, AI news and product updates. No noise.

I agree to receive communications from Alethexis: content about AI and regulation, and product news. I can unsubscribe at any time.

Data protection — newsletter

Controller: ALETHEXIS, S.L. (NIF B88758057). Purpose: to send you the Alethexis newsletter (content about AI and regulation, and product news). Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. Recipients and transfers: we use providers acting on behalf of Alethexis for hosting, security and email delivery. No disclosure of your data to third parties for their own purposes is planned, except where required by law. Some providers may process data outside the EEA with the safeguards set out in the additional information. Rights of access, rectification, erasure, objection, restriction and portability: privacidad@alethexis.com. You may lodge a complaint with the Spanish Data Protection Authority (AEPD, www.aepd.es) or with the supervisory authority of your Member State (Article 77 GDPR). More information in the privacy policy.

Alethexis
Take the AI Act assessment (3 minutes)14-day free trial

Product

  • M1 Visibility
  • M2 Governance
  • M3 High-Risk Ready
  • Agentic Add-on
  • How it works
  • All features
  • Pricing
  • AI governance software

Solutions

  • For DPOs and consultants
  • Shadow AI
  • If you develop AI

Sectors

  • Dental Clinics
  • B2B Distribution
  • Food Distribution
  • Recruitment and HR
  • Private Education
  • Private Healthcare
  • Financial Services
  • Logistics and Transport
  • Professional Services and Consulting
  • Other sectors
  • All sectors

Resources

  • The Route: AI governance in 30 days
  • AI Act assessment
  • Templates
  • EU AI Act guide
  • Glossary
  • AI Act timeline
  • Blog
  • Changelog

Trust

  • Overview
  • Trust Center
  • Security

Company

  • About us
  • Contact
  • hello@alethexis.com
  • Partners

Legal

  • Legal Notice
  • Privacy Policy
  • Terms of Service
  • DPA (Data Processing Agreement)
  • Cookie Policy
  • Subprocessors & Service Providers Register
© 2026 Alethexis, S.L. · NIF B88758057 · C/ Tirso de Molina 36, 08940 Cornellà de Llobregat (Barcelona) · The enterprise standard. Built for SMEs.

Alethexis structures the governance, risk, operation and evidence of AI use. Using the platform does not constitute legal advice, nor does it by itself establish regulatory compliance.

LinkedIn · Contact · Product data in the EU 🇪🇺 · See the subprocessors & service providers register
By Rafael Luque Ocaña·13 September 2026

Article 64.4(d) of Spain's Estatuto de los Trabajadores: your works council already has the right to know which algorithms you use, and AI Act Article 26(7) will extend it in 2027

Works councils in Spain are entitled to the parameters, rules and instructions of algorithms that decide about staff. What that covers and how to inform.

This article is for anyone who runs or advises a Spanish company with a works council or staff delegates and uses algorithms that decide, or help decide, about its staff: a recruitment tool that scores applications, a tool that allocates shifts, a system that measures productivity. Since the 2021 reform, Spain's Estatuto de los Trabajadores has given workers' representatives a specific right over those systems, and it does not wait for any AI Act date.

What the Article says

Article 64.4 opens by giving the right to the works council, to be exercised as often as each case requires. Its point (d) gives the council the right to be informed by the company of the parameters, rules and instructions on which the algorithms or artificial intelligence systems are based that affect decision-making which may influence working conditions, access to and retention of employment, including profiling.

It has three elements. Algorithms or AI systems: not only AI in the strict sense, but also a rules-based algorithm. That affect decision-making: they do not have to decide on their own. That may influence working conditions, access to and retention of employment: shifts, variable pay, promotions, dismissals and also hiring, because access to employment is on the list.

In a small company, the right is not lost for lack of a works council: Article 62.2 gives staff delegates the same powers as works councils.

What "parameters, rules and instructions" means in an SME

Three examples.

A recruitment tool that ranks applications. What the council can ask for: which data the system takes (the CV, a test, a recorded interview), which criteria it weighs and, if known, with what weight, what it produces (a score, a ranking, a rejection), which threshold is applied and who reviews the result before deciding. It is not the source code: it is the logic through which the system influences the decision.

A tool that allocates shifts. Which data it uses (availability, seniority, performance), which priority rules it applies and what it does when two people ask for the same thing.

A system that measures productivity and feeds variable pay. Which activity it records, how it turns it into a score and how much that score weighs in variable pay or the annual review.

And what falls outside: an algorithm that does not affect decisions about staff, such as an optimiser that only plans deliveries or a spam filter, is outside point (d). The same optimiser, if it assigns routes and loads to each driver with an effect on their working conditions, may fall within it. So the useful question is not whether the tool is AI, but whether any decision about a member of staff goes through it.

Much of that information sits with the vendor, not the company. That is why asking about the system's logic is one of the questions worth putting before contracting it, and an AI recruitment tool is the clearest case.

And the form matters. Article 64.1 defines information as the transmission of data by the employer to the works council so that it knows about a given matter and can examine it, and Article 64.6 requires it to be given at a time, in a manner and with content that allow the representatives to examine it properly. A sheet with the product's name does not do it.

The LOPDGDD, alongside

Article 64.4(d) does not stand alone. If the system runs on the company's digital devices, Article 87.3 LOPDGDD requires criteria for their use to be set with the participation of workers' representatives, and Article 90 requires information before geolocating. They are different rights, which add up: we explain them in Articles 87 to 91 LOPDGDD.

What AI Act Article 26(7) will add

For high-risk systems, the AI Act will add another information duty:

"7. Before putting into service or using a high-risk AI system at the workplace, deployers who are employers shall inform workers’ representatives and the affected workers that they will be subject to the use of the high-risk AI system."

It looks like Article 64.4(d), but it is not the same:

Article 64.4(d), Estatuto de los TrabajadoresArticle 26(7), AI Act
Which systemsAlgorithms or AI systems affecting decisions on working conditions or access to and retention of employmentHigh-risk AI systems used at the workplace, such as those in Annex III, point 4
Who is informedThe works council or the staff delegatesWorkers' representatives and the affected workers
About whatThe parameters, rules and instructions they are based onThat they will be subject to the use of the system
WhenAs often as each case requiresBefore it is put into service or used
From whenIn forceFrom 2 December 2027 for Annex III high-risk systems and from 2 August 2028 for Annex I systems

Article 26 applies from 2 December 2027 for Annex III high-risk systems and from 2 August 2028 for Annex I systems; it does not reach Annex I, Section B products. For a recruitment or performance-evaluation tool, which are in Annex III, the date is December 2027: you can see it on the calendar, and why it is not August 2026 is explained in another article.

The AI Act does not replace the Estatuto de los Trabajadores: Article 26(7) itself says the information is to be provided, where applicable, in accordance with the rules and procedures of Union and national law. Article 64.4(d) will remain the channel for the detailed information, and Article 26(7) will add the information to the affected workers.

Where a company's high-risk systems sit is explained in high risk is not in your business, it is in HR; and the case of recruitment agencies, which use the system on candidates who are not their workers, in when HR is the business.

What document proves you informed

No law sets a format. What can be shown is what is written down:

  1. A communication to the works council or staff delegates, dated, listing the systems concerned.
  2. For each system, its parameters, rules and instructions, in language that allows them to be examined.
  3. The representatives' acknowledgement of receipt.
  4. An update whenever the system changes, because a change of model or criterion changes what was reported.

Once Article 26(7) applies, the same file will be the basis for informing the affected workers before a high-risk system is used.

Related reading: since 5 October 2026, Spain's RD 723/2026 adds individual written information for each worker. From 5 October, your staff have the right to know which systems decide about their work.

Content in accordance with Articles 62.2 and 64 of Spain's Estatuto de los Trabajadores, Articles 87 and 90 of Spain's Ley Orgánica 3/2018, and Article 26 and Annex III of Regulation (EU) 2024/1689, with the Article 113 dates as amended by Regulation (EU) 2026/1744.

This article is for informational purposes only and does not constitute legal advice.

Frequently asked questions

What if there are no workers' representatives?

The Article 64.4(d) right belongs to the works council, and Article 62.2 of the Estatuto de los Trabajadores gives staff delegates the same powers. If the company has no workers' representatives, nobody can exercise it; Article 26(7) of the AI Act, once it applies to a high-risk system, will also require the affected workers to be informed.

Does informing mean negotiating?

No. Article 64.1 of the Estatuto de los Trabajadores defines information as the transmission of data by the employer to the works council so that it knows about a given matter and can examine it, and distinguishes it from consultation, which is the exchange of views and the opening of a dialogue. Article 64.4(d) grants a right to information.

What document proves it?

No law sets a format. Article 64.6 requires the information to be given at a time, in a manner and with content that are appropriate for the representatives to examine it. A written, dated communication listing the systems and their parameters, rules and instructions, with an acknowledgement of receipt, is how you can show it was done.

Sources

  • Spain's Estatuto de los Trabajadores, Article 64.4(d) (no official English version)
  • Spain's Estatuto de los Trabajadores, Articles 62.2, 64.1, 64.4 (opening words) and 64.6 (no official English version)
  • Regulation (EU) 2024/1689, Article 26
  • Regulation (EU) 2024/1689, Annex III, points 1 and 4
  • Regulation (EU) 2026/1744, which sets the Article 113 dates
  • Spain's Ley Orgánica 3/2018 (LOPDGDD), Articles 87 to 91 (no official English version)

Last substantive review: 13 September 2026

Scope: Spanish companies with workers' representatives that use algorithms or AI systems that decide, or help decide, about staff. Explains Article 64.4(d) of the Estatuto de los Trabajadores and its relationship with Article 87.3 LOPDGDD and Article 26(7) of the AI Act; does not cover collective bargaining or the penalty regime.

Reviewed by Rafael Luque

Want to start from the beginning? The Route: AI governance in seven steps →

Drafted with AI support and published after human review. Editorial responsibility: Alethexis SL.

Related

  • Your company's high risk probably isn't in your business: it's in HR
  • Recruitment: when HR is the business, high risk stops hiding
  • AI in recruitment: the high-risk zone arriving in December 2027
  • Articles 87 to 91 LOPDGDD: AI in the Spanish workplace has its own national rules, and they do not wait for 2027

Where to go next

Next read

Your company's high risk probably isn't in your business: it's in HR

Next step

Take the AI Act assessment (3 minutes)

Get analysis like this in your inbox

Alethexis regulatory and product news. No noise.

I agree to receive communications from Alethexis: content about AI and regulation, and product news. I can unsubscribe at any time.

Data protection — newsletter

Controller: ALETHEXIS, S.L. (NIF B88758057). Purpose: to send you the Alethexis newsletter (content about AI and regulation, and product news). Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. Recipients and transfers: we use providers acting on behalf of Alethexis for hosting, security and email delivery. No disclosure of your data to third parties for their own purposes is planned, except where required by law. Some providers may process data outside the EEA with the safeguards set out in the additional information. Rights of access, rectification, erasure, objection, restriction and portability: privacidad@alethexis.com. You may lodge a complaint with the Spanish Data Protection Authority (AEPD, www.aepd.es) or with the supervisory authority of your Member State (Article 77 GDPR). More information in the privacy policy.