On 24 April 2025, the revised version of UNE 19601 Standard on Management System for Criminal Compliance was published, replacing the previous version from 2017. UNE 19601 is the reference standard in Spain for implementing a criminal compliance management system and it covers the requirements of the Spanish Penal Code as well as international standards in the field.
The general approach of the initial version is maintained, although modifications have been introduced to adapt it to regulatory changes (primarily, those in the Spanish Penal Code and whistleblowing management standards) and international standards of recent years (such as ISO 37301:2021 or ISO 37002:2021).

The Serious Fraud Office (SFO) has published new guidance on corporate co-operation, which is intended to encourage corporates to self-report potential criminal misconduct to the SFO.
The guidance provides that, if a corporate entity self-reports suspected wrongdoing and cooperates fully with an SFO investigation, it can expect to be invited to negotiate a Deferred Prosecution Agreement rather than face prosecution, unless exceptional circumstances apply.

On 20 March 2025, the decree enacting the General Law of Transparency and Access to Public Information, the General Law for the Protection of Personal Data in Possession of Obligated Entities, the Federal Law for the Protection of Personal Data in Possession of Private Parties, and the amendment to Article 37, Section XV, of the Organic Law of the Federal Public Administration was published in the Official Gazette of the Federation.

On 9 April 2025, the Commission de Surveillance du Secteur Financier issued several new circulars related to information and communication technologies risk management and the use of ICT third parties, aiming to align existing circulars and practices with the Digital Operational Resilience Act.