The Secretariat of State for Digitalization and Artificial Intelligence has taken another step in building the country’s data infrastructure. Through a new resolution published in the “Official State Gazette,” the Ministry for Digital Transformation and Public Function defines what the so-called Trust List of Data Spaces will be and how it will operate — the official catalog where data spaces meeting certain common standards of quality, security, and governance will be registered.
This is a key component of Spain’s digital transformation strategy, outlined in Royal Decree 210/2024 and updated by Royal Decree 1185/2024, which assign the leadership of strategic projects to the Secretariat of State, as well as liaising with industry, academia, public administrations, and civil society.
What is the Trust List of Data Spaces
The Trust List was formally established by Order TDF/1207/2025, of October 27 as a public catalog where data spaces that meet the criteria set by the Secretariat of State for Digitalization and Artificial Intelligence can register.
The concept is straightforward: provide companies, administrations, and citizens with a list of data spaces operating under clear, transparent, and verified rules. Each registration will include basic information such as:
- Name of the data space.
- Website.
- Contact email.
- Main sector targeted.
- A brief description.
- Name or business name and Tax Identification Number (NIF) of the promoting entity.
All this information will be publicly accessible via the portal established by the Secretariat of State itself.
A resolution with detailed provisions
The new resolution elaborates on the practical aspects left pending in Order TDF/1207/2025. Specifically, it establishes:
- The definition and characteristics required for a data space to be eligible for registration.
- The minimum information to be publicly visible on the List.
- The application process for registration or modification, to be submitted through the Ministry for Digital Transformation and Public Function’s online portal.
- The evaluation criteria to decide whether a data space will be accepted.
- Automatic registration of the National Health Data Space, which will be included in the List without a formal application.
- The official communication channel, via email [email protected].
The resolution will come into effect the day after its publication in the BOE, marking the official start of the Trust List’s operational phase.
UNE 0087:2025, the “constitution” of data spaces
To ensure a standardized framework, the government relies on UNE 0087:2025, “Definition and characterization of Data Spaces”, published on July 17, 2025, by the Spanish Association for Standardization (UNE).
This standard, developed through public-private collaboration, is the first in Spain to establish a common technical language for these data exchange environments. It defines what a data space is, its essential characteristics, and the benefits it provides: increased trust among participants, interoperability, security, and alignment with the European framework.
The Secretariat of State adopts this specification as the reference for determining which projects can be included in the Trust List. In essence, UNE 0087:2025 becomes, by default, the minimum standard for an officially recognized data space.
How to apply for registration
Promoting entities wishing to have their data space included in the List must fill out an online form available through the Ministry’s portal and submit the supporting documentation required for each case.
The minimum content of the form includes:
- Provider’s identifying details (name or business name, NIF, registered address).
- Details of the representative (name, surname, identification document).
- Contact information (phone, email).
- Details of the data space itself (name, website, contact email, main sector, description).
Furthermore, both for initial registration and significant modifications, attaching a Technical Report following the template to be published alongside the form is mandatory. This document must describe the architecture, processes, governance, and actual operation of the data space.
Five key criteria for project evaluation
To determine whether a data space can be added to the List, the resolution sets five main evaluation blocks, aligned with UNE 0087:2025:
- Business model
Assesses whether the data space has a viable and sustainable model, whether for economic purposes, regulatory compliance, or other objectives. The clarity of the business plan and the existence of an expansion strategy to onboard new participants are evaluated. - Governance system
Analyzes the presence of clear and equitable rules for all members: governance structure, operating norms, and role definitions. Governance is key to fostering trust among organizations sharing data. - Technical solution
The Secretariat reviews the robustness of the technological architecture: identity management and trust services, data catalogs, transfer mechanisms, security and privacy measures, as well as compliance and auditing processes. - Interoperability
Measures the data space’s ability to connect different systems and transfer data from source to destination in a controlled manner, respecting rules, policies, and contractual agreements. - Verification of real operation
It’s not enough to rely solely on theory. The promoter must provide evidence that the data space is operational: participant onboarding procedures, catalog display and publication, and actual data transactions. Evidence can include screenshots, videos, accessible URLs, or detailed technical documentation.
Only when these five blocks are properly justified can the Secretariat of State approve the registration or modification of a data space on the Trust List.
First automatic registration: the National Health Data Space
The resolution also sends a clear political message: data spaces are not just an abstract idea but an existing infrastructure. Accordingly, it approves the automatic registration of the National Health Data Space, making it the first data space included in the List without prior formal application.
This initiative, led by health authorities, aims to become a cornerstone of information reuse in healthcare, always under strict security and data protection standards.
Frequently Asked Questions
What exactly is the Trust List of Data Spaces?
It is a public catalog managed by the Secretariat of State for Digitalization and Artificial Intelligence, where data spaces that meet certain common standards for business model, governance, technical solution, interoperability, and actual operation—based on UNE 0087:2025—are registered.
Who can request a data space registration?
Any promoting entity, public or private, managing a data space and able to demonstrate compliance with the conditions set by the Secretariat of State. The application is submitted via the Ministry’s online portal.
What are the benefits of appearing on the Trust List?
Inclusion offers official recognition that can facilitate collaboration with other organizations, attract partners, and participate in national and European projects. It also enhances transparency by publishing basic information about the data space and its promoter.
What technical documentation is required to register a data space?
Beyond the basic form, a Technical Report detailing the architecture, security and privacy mechanisms, governance, participant onboarding procedures, data catalog, and real transaction examples with verifiable evidence is mandatory.
Sources: Official State Gazette (Royal Decree 210/2024, Royal Decree 1185/2024, Order TDF/1207/2025, and the Secretariat of State for Digitalization and AI’s resolution on the Trust List of Data Spaces).
Source: BOE