Digital Disconnection: A Legal Obligation That Many Companies Are Ignoring
Advisory to companies on the right to digital disconnection: mandatory policies, Art. 18 Law 10/2021, GDPR Art. 88 and protection against employment claims.
Does this apply to your business?
Does your company have a written and approved digital disconnection policy in accordance with Law 10/2021?
Do your teleworking employees receive messages or emails outside their registered working hours?
Have you integrated the disconnection policy into your psychosocial risk prevention plan?
Do you know what digital disconnection provisions your applicable sectoral collective agreement may contain?
0 of 4 questions answered
How we work
Compliance diagnostic
We audit the current position: existence and content of the disconnection policy, working time register, technology tools in use and applicable collective agreement to determine the specific obligations.
Drafting the digital disconnection policy
We draft the policy in accordance with Art. 18 Law 10/2021 and Art. 88 GDPR: definition of working hours, authorised channels and timetables, response obligations and technical measures for blocking or notifying outside working hours.
Negotiation and validation with workers' representatives
Where the company has legal workers' representatives, we facilitate the negotiation of the protocol, ensuring that the final text complies with the law and has the backing of both parties.
Implementation and training
We implement the policy across corporate systems, train managers and employees on its practical application, and integrate it with the psychosocial risk prevention protocol.
The challenge
Law 10/2021 on remote work requires all companies with teleworking employees to have a digital disconnection policy, but more than 60% of companies with telework employees either lack one or have an outdated version. The absence of a policy exposes the company to employment claims for unregistered overtime, Labour Inspectorate sanctions and contingencies in relation to psychosocial risk prevention.
Our solution
We audit digital disconnection compliance, draft the mandatory policy in accordance with Art. 18 of Law 10/2021 and Art. 88 of the GDPR, negotiate it with the workers' representatives where required, and integrate it with the working time register and the psychosocial risk prevention protocols.
The right to digital disconnection in the workplace is recognised in Spain by Article 88 of Organic Law 3/2018 on Data Protection (LOPDGDD — Ley Orgánica de Protección de Datos y Garantía de Derechos Digitales), which establishes it as a right of workers not to attend to professional digital communications outside their working hours. This right is complemented by Article 18 of Law 10/2021 on remote work, which requires companies with teleworking employees to develop an internal digital disconnection policy — negotiated with workers' representatives where they exist — delimiting working hours, authorised channels and technical supporting measures. Article 88 of the GDPR supports this right within the European framework, recognising Member States' competence to regulate it through legislation and collective bargaining. The absence of a policy or non-compliance may give rise to employment claims for unpaid overtime, Labour Inspectorate sanctions and psychosocial risk prevention contingencies.
Digital disconnection has moved from a theoretical debate about workplace wellbeing to a legally enforceable obligation with real financial consequences for companies that disregard it.
Why digital disconnection is no longer optional for Spanish companies
The massive expansion of telework from 2020 onwards highlighted a reality that many companies preferred to ignore: when work enters the home, the working day loses its boundaries. Employees respond to emails at eleven at night, attend to WhatsApp messages on Sundays and join video calls at times that exceed their contractual working hours.
The Spanish legislature responded with Law 10/2021 on remote work, which established the obligation for companies with teleworking employees to develop a formal digital disconnection policy. But three years after its entry into force, more than 60% of companies with teleworking employees still lack an adequate policy, either through lack of awareness or on the assumption that compliance is not a priority until the inspection arrives.
When the inspection arrives, it does not come alone. It brings with it the possibility of TRLISOS serious infraction sanctions, employment claims from employees who have been permanently reachable without compensation, and psychosocial risk contingencies if the risk assessment for the telework role does not include preventive measures against information overload and hyperconnectivity.
How we implement the digital disconnection policy in your company
Our process begins with a diagnostic of the actual position: what communication tools the company uses, at what times effective out-of-hours exchanges take place, what the applicable collective agreement provides, and what has been formalised to date. This diagnostic is necessary because the disconnection policy is not a generic document: it must be adapted to the sector, the type of working arrangement and the specific organisation of each company.
From the diagnostic, we draft the policy in accordance with Art. 18 of Law 10/2021: definition of working hours, authorised communication channels and timetables, differentiated treatment for genuine emergencies, managers’ obligations regarding the reachability of their teams, and technical supporting measures where the company has them available (out-of-hours auto-replies, scheduled notification blocking).
Where the company has legal workers’ representatives, we facilitate the consultation or collective bargaining process required by law. Where there are no representatives, the policy can be adopted as a company-wide rule of general application, with appropriate communication to all employees.
Integration with data protection obligations is relevant where the company monitors the use of corporate devices: the processing of data about employees’ out-of-hours activity has GDPR implications that must be managed jointly.
Regulatory framework: Law 10/2021, LOPDGDD and GDPR
The right to digital disconnection has a triple statutory basis in Spain:
Article 88 LOPDGDD (Organic Law 3/2018): establishes the general right to digital disconnection for all workers and public employees, regardless of whether they work remotely. Collective agreements or, in their absence, company agreements, are to establish the modalities of exercise of this right.
Article 18 of Law 10/2021 on remote work: for companies with remote workers (minimum 30% of working time), requires the development of an internal disconnection policy negotiated with workers’ representatives where they exist. This policy must be part of the telework agreement or a separate reference document.
Article 88 GDPR: supports the national regulation of the use of digital devices in the employment context, including the protection of privacy and the right to rest, recognising Member States’ competence to establish specific rules through legislation and collective bargaining.
The interaction between these three frameworks determines the specific obligations of each company, which vary according to the sector, the applicable collective agreement and the structure of working hours.
Digital disconnection and psychosocial risk prevention
Permanent hyperconnectivity is a recognised psychosocial risk factor that can give rise to occupational stress, burnout and anxiety disorders. The Occupational Risk Prevention Act requires companies to identify, assess and control all workplace risks, including psychosocial risks.
For telework roles, the risk assessment must specifically include the risks deriving from permanent connectivity: isolation, difficulty switching off, uncontrolled extension of working hours and difficulties in reconciling work and personal life. The digital disconnection policy is, in this context, not merely a formal compliance exercise but a preventive measure that reduces exposure to psychosocial risk.
Companies that integrate digital disconnection into their risk prevention system are in a considerably stronger position in the face of claims for work-related stress conditions, which are a growing source of litigation before the Social Courts.
Regulatory compliance obligations at a glance
| Obligation | Statutory basis | Consequence of non-compliance |
|---|---|---|
| Internal disconnection policy | Art. 88 LOPDGDD | Labour infraction LISOS (up to €7,500) |
| Negotiation with workers’ representatives | Art. 88.3 LOPDGDD | Policy nullity if negotiation omitted |
| Telework agreement with disconnection provision | Art. 18 Law 10/2021 | Serious LISOS infraction (€751–€7,500) |
| Working time register | Art. 34.9 Workers’ Statute | Serious LISOS infraction + liability for unpaid overtime |
| Training and awareness | Art. 88.3 LOPDGDD | Liability in the event of an employment claim |
This service is part of our employment law advisory practice.
The experience behind our work
We had been running telework since 2020 without a formal disconnection policy. BMC audited our position, drafted the policy within a week and negotiated it with our works council. We closed the Labour Inspectorate file without any sanction.
Experienced team with local insight and international reach
Concrete deliverables
Digital disconnection compliance audit
Diagnostic of the current position: existence and adequacy of the policy, applicable collective agreement, technology tools in use, working time register and overtime protocol.
Digital disconnection policy drafting
Preparation of the document in accordance with Art. 18 Law 10/2021 and Art. 88 GDPR/LOPDGDD, adapted to the company's specific sector, size and organisation.
Negotiation with workers' representatives
Legal support for the consultation or negotiation process with the works council, worker delegates or trade union representatives where required by law.
Training for managers and employees
Training sessions adapted to different levels within the organisation: executives, line managers and teleworking employees, with supporting materials and responsible device-use guidance.
Results that speak for themselves
Commercial debt portfolio recovery
92% portfolio recovery in 4 months, with out-of-court settlements in 78% of cases.
Multinational Employment Spain: Legal Defence Case | BMC
100% favorable outcomes: 5 advantageous conciliation agreements and 3 fully upheld court rulings.
GDPR Healthcare Spain: Compliance Case Study | BMC
AEPD investigation closed with no sanction. Full GDPR compliance achieved across all group centres within 6 months.
Reference guides
Post-Brexit: your British company operating in Spain with the right structure
post-Brexit advisory for UK companies operating in Spain: entity structuring, customs and VAT, work permits for British nationals, UK-Spain tax treaty optimisation and data protection compliance.
View guideAML compliance in Spain 2026: what your business must know about anti-money laundering regulation
Spain AML compliance 2026: SEPBLAC obligations, risk-based approach, PBC manual, UBO verification, and suspicious transaction reporting. Expert service from BMC.
View guideComprehensive legal services for businesses
Comprehensive legal advisory for businesses: commercial, employment, contracts, regulatory compliance, and dispute resolution. A dedicated legal team to protect your company.
View guideBuy property in Spain with confidence — and without the horror stories
Buying property in Spain 2026: NIE, conveyancing, ITP tax, mortgage advice, and due diligence for foreign buyers. Step-by-step guide from BMC property lawyers.
View guideThe collective agreement that governs your workforce: understand it and negotiate from strength
Spain collective bargaining guide: union negotiation obligations, ERE/ERTE triggers, works council rights, agreement registration, and how BMC protects employer interests.
View guideYour commercial lease agreement: get the clauses right before you sign
Spain commercial lease guide: LAU legal framework, rent review clauses, break options, guarantee structures, and key negotiation points for tenants and landlords.
View guideAnalysis and perspectives
Frequently asked questions
Start with a free diagnostic
Our team of specialists, with deep knowledge of the Spanish and European market, will guide you from day one.
Right to Digital Disconnection
Legal
First step
Start with a free diagnostic
Our team of specialists, with deep knowledge of the Spanish and European market, will guide you from day one.
Request your diagnostic
You may also be interested in
Employment Law for Businesses
Comprehensive employment law advisory to protect your company and ensure regulatory compliance in all people matters.
Saber másEmployment Law
Comprehensive employment law services that protect your business and ensure compliance with Spanish labour regulations.
Saber másData Protection & Privacy
GDPR and LOPDGDD compliance, outsourced DPO, and comprehensive privacy management for businesses.
Saber másEconomically Dependent Self-Employed (TRADE)
Registration, contract and protection of the TRADE status: compliance with LETA Law 20/2007, mandatory contracts with the principal client and defence before the Labour Inspectorate.
Saber másEmployment Compliance
Comprehensive employment compliance programme: working-time registration, equality plans, pay transparency, harassment protocols, remote work agreements, and labour inspection defence.
Saber más