The technology M&A market is expected to be very active in 2026. In addition to more traditional technology sectors, such as software and digital development, increased activity is anticipated in defence technology, artificial intelligence and biotech.
Delays in deal closings have contributed to a strong pipeline (that is, the sequence of events in the acquisition process) for 2026.
Start-up companies are commonly incorporated in Spain, which is generally considered an attractive jurisdiction for entrepreneurs. This is largely due to the availability of certain tax benefits and a high quality of life, while other key incorporation parameters are broadly comparable to those of other EU jurisdictions.
A limited liability company is the option most often recommended to initiate a business in Spain.
Early-stage financing is typically provided by founders’ close networks, including friends and family, as well as informal angel investors. Follow-on is typically financed by local investors and family offices, together with more professionalised investors included in the ecosystem. Grants and government debt also play a relevant role at early stages.
Funds and venture capital firms are largely established and active in Spain.
Standard practices for venture capital documentation are well developed in Spain.
Changes in corporate form are effected by driven access to the needs of capital markets. In Spain, only SAs (open forms of limited liability company) can go public, while SLs, (closed forms of limited liability company) are preferred at early stages.
Initial Public Offerings (IPOs) are marginal and usually reserved to larger-sized companies, despite the existence of easier new ways to access public capital markets. This trend is expected to accelerate in the future.
Both national and foreign listings coexist in Spain. Companies may choose to pursue either or both of these options, depending on market costs and their growth strategy.
The decision to list on a foreign exchange will certainly have an impact on future transactions and this choice is often based on the applicability of such mechanisms as squeeze-out rules.
Most low and mid-low market deals are usually bilateral negotiations. As companies increase in size, selling by means of auctions will allow a higher price to be obtained.
.
When a privately held technology company is sold, full divestments of national venture capital funds (VCs) are typically seen, while founders are usually offered roll-overs or retained with earn-out schemes.
The choice between cash, shares or a combination of both largely depends on the buyer’s strategic plans for the target, in particular whether the business is intended to be fully integrated into a larger group or focused on further growth.
Founders and venture capital (VC) investors are usually expected to provide representations and warranties (R&Ws) post-closing. For identified potential damages, specific indemnity policies, together with price retention, including escrow deposits, are commonly preferred.
Spin-offs are expected to take place in Spain in 2026. The key drivers for pursuing a spin-off are:
Tax deferment schemes are available in Spain, subject to certain formalities and legal requirements.
It is possible for a spin-off to be followed immediately by a business combination and this is not a rare occurrence. Foreign Direct Investment (FDI) or regulatory rules stipulate that a spin-off followed by a merger will require shareholder majorities.
No ruling from tax authorities is required to complete a spin-off. Competition defence authorities may intervene, depending on the market dominance of the parties concerned. In addition, strategic industries such as those having an impact on national security may need to obtain prior authorisation, including according to FDI rules.
It is commonplace in Spain to acquire a stake in a public company prior to making an offer. Transactions in Spanish listed companies which reach, exceed or fall below the 3% thresholds must generally be notified. The threshold is reduced to 1% if the person obliged to report resides in a non-co-operative or zero-tax jurisdiction.
The notification must be made within a maximum period of four trading days from the date when the thresholds are reached.
A mandatory offer is required when a person gains control over a listed company (control of 30% of voting rights or when more than half of the board of directors is appointed within 24 months). In the case of indirect or sudden control takeovers (eg, capital reduction, own shareholdings), the offer must be made within three months of the determining event.
The acquisition of a listed company is typically carried out through a public offer, which may be voluntary or mandatory. As mentioned under 6.2 Mandatory Offers, it is mandatory when control of the listed company is achieved, generally by exceeding 30% of the voting rights or by appointing more than half of the board of directors within 24 months.
Other acquisition structures include indirect or unexpected takeovers (for example, through a merger or control takeover of an entity that holds shares in a listed company).
There is no one-size-fits-all approach. The choice depends on market factors, group structure, financing, taxation, and control objectives.
It is permissible to use cash in a merger through complementary compensation in cash boot (that is, to equalise the value), but with a limit for the tax neutrality regime to apply: it cannot exceed 10% of the nominal value of the shares allocated in the exchange.
There is no general legal minimum price for a takeover offer/business combination; principles governing valuation, information, reporting, and, where applicable, protection of shareholders and creditors apply. For mandatory offers, the consideration must be fair, with specific rules for determining this.
The most common price adjustment and contingent price mechanisms used to cover valuation uncertainties are typically earn-outs, milestones, and cash/debt/working capital adjustments.
Typical conditions in a takeover offer mainly focus on:
Regulators severely restrict the use of conditions in mandatory tender offers, except as provided for authorisations relating to competition. In voluntary tender offers, the regime is more flexible and allows conditions within the legal catalogue and under the control of the Spanish National Securities Market Commission (CNMV).
The usual practice is to agree on negotiation phases and documents, based on a Letter of Intent (LOI) setting out the transaction's minimum conditions subject to verification. In a takeover offer, the procedure is highly regulated, with a focus on the submission of the prospectus and supporting documentation to the CNMV, which in practice is co-ordinated with private agreements.
There is no “minimum acceptance condition” to trigger the obligation in mandatory offers, because the obligation arises from gaining control of the listed company. In voluntary offers, it is typical to make effectiveness conditional on a minimum verifiable acceptance at the end of the period, to ensure that the offeror achieves the target level of control and to avoid a result of insufficient participation.
Where the offer is for the entire share capital, the legislation links subsequent squeeze-out and sell-out rights to the offeror acquiring at least 90% of the voting capital and the offer being accepted by at least 90% of the voting rights targeted, excluding those already held by the offeror in the legal case.
In takeover offers, proof of the guarantee of payment (in cash or securities) must be provided, normally by means of a bank guarantee or deposit/allocation of funds, in accordance with the terms required by the applicable regulations and verified by the CNMV. As a rule, it is not necessary to provide executed financing documents with bank certification. The financing banks are not offerors by virtue of their financing.
The target company may agree break-up fees in favour of the first offeror, with a limit of 1% of the total amount of the offer and subject to the requirements of approval by the Board of Directors, a favourable report from the financial adviser and disclosure in the explanatory prospectus.
The Spanish framework links governance rights to the notion of control of the listed company. If control is not achieved through the holding of the percentages provided for by law, control may also be achieved through concerted action by means of shareholders' agreements.
In transactions involving listed companies it is common to seek commitments of support and action from relevant shareholders to ensure the successful completion of the transaction. These commitments may even be structured as shareholders' agreements, which may include advance acceptance of the takeover offer and obligations to vote in a manner consistent with the transaction.
Its nature is essentially contractual, aimed at co-ordinating the exercise of political rights and, where appropriate, regulating the transfer or maintenance of shareholdings, including lock-up periods to ensure market stability and confidence, especially in Initial Public Offerings (IPOs).
The offer must request authorisation from the CNMV before its public and general disclosure. The review and authorisation are governed by a general period of 20 business days, calculated from the date the CNMV receives the complete application or, if documents are provided later or there are other requirements, from the date of their registration or submission.
The CNMV authorises or rejects the offer after examining the prospectus and documentation and may request additional information. After authorisation, the offeror must publish the offer within five business days, and the acceptance period is set by the offeror within legal minimums and maximums.
The offer may be structured in such a way that it is conditional upon the authorisation or non-opposition of the competition authorities, with notification to those authorities being certified to the CNMV when necessary.
The acceptance period is set by the offeror in the prospectus, with a minimum of 15 calendar days and a maximum of 70 calendar days, calculated from the trading day following the publication of the first announcement.
The offeror may extend the period initially granted, after notifying the CNMV, provided that it does not exceed the maximum of 70 days, and announcing it in the same media at least three calendar days before the end of the initial period.
The CNMV may agree to extend the period in other cases when necessary, with a reasoned decision and for the sake of the successful completion of the offer and the protection of the recipients.
The incorporation and commencement of activity of a technology company is not, generally, subject to prior authorisation, although there are regulated technology sectors in which administrative authorisation or specific registration is required before operating.
In regulated financial services, the CNMV may intervene for investment services companies and crowdfunding service providers, and the Bank of Spain for payment institutions and electronic money institutions.
In telecommunications, the start-up requires prior notification to the Register of Operators, with a maximum period of 15 working days for the Register to verify the requirements. In crowdfunding, authorisation is decided within a maximum of three months.
In payment institutions and electronic money institutions, the period is three months with a presumption of rejection if no response is received, and in investment services companies, the authorisation period is six months, with a presumption of rejection if no response is received.
To provide crypto-asset services, authorisation as a crypto-asset service provider is generally required, and services cannot be provided without authorisation. The competent authority must acknowledge receipt of the application within five business days, verify its completeness within 25 business days, and, once complete, issue a reasoned decision within 40 business days, notifying the decision within five business days.
The main regulator of the securities market with supervisory, inspection, and sanctioning powers over actions related to corporate transactions that impact securities markets, including acquisitions of control and takeover offers in the context of M&A, is the National Securities Market Commission (CNMV).
A general principle of liberalisation of foreign investment applies, but there is a mechanism of control and prior authorisation, of a suspensive nature, for certain foreign direct investments in strategic sectors and in cases related to public safety, public health and public order.
For investments by EU and European Free Trade Association (EFTA) residents in certain Spanish companies, the suspension of liberalisation is maintained on a transitional basis until 31 December 2026, for transactions involving listed or unlisted companies with investments exceeding EUR500 million.
Foreign investments in Spain are generally subject to formal and informative controls, articulated through a declaration to the Investment Registry. The declaration to the Investment Registry is mandatory and, in general, must be made after the investment has been made and divested.
When the liberalisation regime is suspended, the transaction is subject to prior authorisation. In such cases, transactions carried out without authorisation are invalid and have no legal effect until they are legalised, and the investor cannot exercise economic and political rights until authorisation has been obtained.
There is a screening procedure based on security, public order, and public health grounds that may subject certain acquisitions to prior administrative authorisation when they involve a stake of 10% or more or the acquisition of control, in accordance with the criteria of the competition law, and fall within strategic sectors (critical infrastructure, critical and dual-use technologies, essential inputs, sensitive information, and media).
Specific restrictions remain in place, based on the origin or profile of the investor, including cases involving investors from third countries, control by third-country governments, or the risk of illegal activities. Separately, there are sectoral controls for investments in activities related to national defence and weapons and explosives for civilian use.
At Spanish national level, concentrations that meet at least one of the following thresholds must be notified to the Spanish authority:
There is a specific exemption when only the 30% market-share threshold is met and the turnover in Spain of the acquired company or assets does not exceed EUR10 million, provided that the participants do not have an individual or joint market share of 50% or more in the affected markets.
In acquisitions with continuity of activity, the starting rule is business succession, which requires the new employer to assume the labour and Social Security rights and obligations, maintaining the conventional regime unless otherwise agreed, and preserving, if there is autonomy, the legal representation mandate.
The general system of information and consultation rights of the works council on business decisions involving significant changes in work organisation and contracts, including merger or takeover processes with an impact on employment, takes on particular relevance.
The free flow of capital and economic transactions with foreign countries is a general principle, without prejudice to limitations imposed by safeguard clauses and sectoral regimes.
In an M&A transaction, it is not usual to require approval from the Bank of Spain for “exchange control,” but the following may apply:
During the period from 2023 to 2026, the most significant regulatory change for M&A activity in technology has been the approval of the new framework for corporate restructuring through Royal Decree-Law 5/2023, transposing Directive (EU) 2019/2121 and extending European solutions to the domestic sphere to avoid regulatory asymmetries.
In terms of relevant technology M&A case law, the Supreme Court's doctrine on the transfer of a branch of activity for consideration is decisive in determining when an acquisition should be structured as a structural change and when it can be configured as a single asset transfer.
In technology M&A due diligence, it is important to verify that the target has risk analyses and security measures in line with the General Data Protection Regulation (GDPR), especially in start-up or tech SME environments, where the obligation to adopt measures and assess risk before contracting tools or applications is emphasised.
The practice also incorporates the examination of incident management and IT audit evidence, due to its role in identifying vulnerabilities and preventing legal risks associated with the use of IT, aligning with sectoral network and system security obligations for certain operators, which require proportionate measures and documentation of security policies.
The listed company may provide bidders or potential bidders acting in good faith with non-public information in the context of due diligence, but if it does so during the search for competing offers, it must preserve equal access to information, providing each bidder with the same information when specifically requested and necessary to formulate the takeover offer, subject to confidentiality and exclusive use for the purpose of preparing the offer.
Due diligence for a technology company is limited by compliance with the General Data Protection Regulation (GDPR) and Ley Orgánica (LO) 3/2018, which require that any review of personal data have a legitimate basis, respect the limitation of purpose, and apply minimisation and confidentiality.
There may be significant practical restrictions when the target uses biometrics, geolocation, or video surveillance, as these are particularly intrusive forms of processing and, in the case of biometrics, special categories and high-risk requiring Data Protection Impact Assessment (DPIA). In M&A operations, the communication of data may be presumed lawful if it is necessary for the operation and continuity of the service, and the data must be deleted if the operation is not completed.
The decision to make a voluntary takeover bid must be made public and disclosed as soon as it is adopted, and only after the bidder has ensured the full availability of the cash consideration or has taken reasonable steps to guarantee any other consideration. In the case of a mandatory takeover bid, it must be published and disclosed immediately once the obligation is triggered.
The general rule is that securities may only be offered to the public or admitted on a regulated market after the prior publication of a prospectus. In a takeover bid, the key document is the offer prospectus. When the consideration consists of securities issued or to be issued, the offeror may choose to include in the takeover bid prospectus information equivalent to that required in an IPO or public offering, or to incorporate by reference an authorised and current prospectus in accordance with the prospectus regime applicable to public offers or admissions to listing.
The offeror must provide the CNMV with an audit of its financial statements, at least for the last closed or approved financial year. If the offeror is a Special Purpose Vehicle (SPV) with no activity or created for the offer, the required audit is transferred to its shareholders or controlling partners. If, in a takeover bid, the consideration consists of securities already issued by a company other than the bidder, the audited financial statements of the issuing company, at least for the last financial year, and documentation proving its incorporation and articles of association must also be provided, unless previously deposited with the CNMV.
The parties must submit the core documentation of the M&A transaction to the Commercial Registry when it is structured as a structural change (eg, a merger or spin-off), because the application for the prior certificate and registration require the submission of the project and the legally required reports, in addition to the public deed.
If the transaction is a sale of shares or assets, the Commercial Registry does not generally require the private contract to be filed, although for tax purposes it may be necessary to provide a copy of the public deed or equivalent document in the communication of the special regime and, in addition, the tax authorities may require due diligence reports due to their tax relevance.
The main duties of directors in a business combination or structural modification revolve around the duty of diligence and the duty of loyalty, acting with the diligence of a prudent businessperson and in the best interests of the company, with the right and duty to gather the information necessary to make decisions.
In strategic and business decisions, they are protected by business discretion if they act in good faith, without personal interest, with sufficient information and following an appropriate procedure.
In the specific context of structural modifications, directors assume enhanced disclosure duties and must prepare a report by the administrative body for shareholders and employees explaining and justifying the legal and economic aspects of the transaction and its consequences, making it available at least one month in advance and, where appropriate, incorporating the opinion of the employees' representatives.
In a merger, they must also ensure that the relevant corporate documentation is made available and must communicate any significant changes in assets and liabilities between the draft and the shareholders' meeting.
In business combination transactions, it is common for the board to set up special or ad hoc committees to conduct the analysis and negotiation of the transaction and reinforce the independence of the process.
When there is a conflict of interest (or a significant risk of conflict) involving one or more directors, these are used to ensure that the matter can be examined and, where appropriate, negotiated by a more independent body, with the directors concerned abstaining from deliberations and voting on matters that affect them.
The board of directors can, and often does, actively participate in the negotiation of an M&A transaction as part of its management duties, but its scope for action is limited by specific rules in takeover offer scenarios, due to the duty of passivity, which requires prior authorisation from the board for actions that could prevent the success of the offer, with the exception of seeking competing offers.
In takeover offers, the board must also issue a reasoned report on the offer. Corporate litigation challenging board resolutions is common, and judicial review is limited to legality and corporate interest, not business expediency. For the buyer, the key considerations are to anticipate challenges based on conflicts of interest and board malfunctioning, and to structure the process to uphold the decision-making process under business discretion, where appropriate.
In takeover operations and business combinations, it is common for directors to rely on financial and technical-economic advice provided by entities/professionals specialising in investment services, and advice on corporate financing strategy in insurance or placement contexts, with enhanced duties of disclosure and conflict control. Experts are required to give their opinion on the fairness of the exchange ratio or compensation and valuation methods.
RSM Spain
C/ José Ortega y Gasset, 22-24
28006 Madrid
Spain
+ 34 91 457 02 39
contactorsmspain@rsm.es www.rsm.global/spain/es
Overview
In the final stretch of 2025, the Spanish M&A landscape continues to be impacted by macroeconomic policies and geopolitical headwinds. Evolving tariff policies, international trade tensions, uncertainty surrounding inflation and unemployment forecasts, and the ongoing tensions in the Middle East, as well as the war in Ukraine, have affected the broader market and dampened investor confidence. Despite these uncertainties, technology M&A continues to represent a strategic priority for many investors and companies heading into 2026.
The year 2026 begins with a strong pipeline of deals that were not closed during 2025 as expected. Two big deals stand out although their execution may be influenced by the current political environment: Indra, the big tech and defence player, plans to acquire EM&E Group (Escribano). Telefonica, for its part, has made public its intention to acquire its big competitor, Vodafone.
The Spanish M&A tech market is typically composed of mid and low-mid market deals (below EUR100 million). According to Mergermarket, the largest tech transaction in 2025 was the acquisition of Idealista (Prop-tech), a EUR2.9 billion deal, followed by Nabiax (Data centres) which reached EUR1 billion. According to the same source, only six deals (two of which involved Gibraltar) were related to public companies, while the rest of reported deals (238) were privately held.
What to Expect for 2026?
Most deals, except the aforementioned Indra and Telefonica deals, are likely to remain within the same value ranges found during 2025. Lower interest rates, together with the dry powder (that is, highly liquid, cash-like marketable securities) accumulated by family offices and investment funds, continue to support acquisitions for this year.
Artificial intelligence (AI) and defence tech are the key drivers in the Tech M&A landscape. AI remains a key driver of deal-making across the technology sector as companies continue to pursue strategic imperatives around AI, including high-performance computing, advanced networking, and scalable power infrastructure. On the defence side, new investment needs arising from the global geopolitical repositioning in the current geopolitical context, are shaping the strategy of most organised funds and drive significant investments around the Spanish peninsula.
Other key drivers of tech M&A include the pursuit of greater supply-chain resilience and intensifying competition, both of which encourage companies to expand their market presence. Businesses continue to pursue cross-border mergers, acquisitions and investments at record levels to access new markets, diverse talent pools and strategic technologies. These businesses are increasingly willing to navigate regulatory complexity to leverage global opportunities for innovation and growth; given the pace of technological innovation, the pressure to move quickly has never been greater.
Tech M&A Relevance
Tech remains the most targeted sector for M&A by value and volume, characterised by an upward trend in global deal activity and investment through 2025. According to Mergermarket’s data for 2025, tech M&A led all sectors with over 240 transactions out of a total of 320 deals.
According to the market information, aside from a limited number of large deals, vertical business integration implying buy-and-build strategies is likely to be the main trend for 2026. AI infrastructure, cybersecurity and cloud services for vertical markets (travel, real estate, health, communications) are expected to play a central role in the 2026 M&A landscape. Adjacent industries, including the utilities and energy sectors, are also benefiting from this trend.
Private equity and venture capital firms are also deploying record dry powder globally to target scalable tech platforms, with firms increasingly favouring M&A as a route to acquiring global talent and infrastructure in the tech sector. The technology M&A pipeline remains strong, supported by improving financing conditions and expectations of moderating inflation.
The AI Revolution
AI continues to dominate tech investment throughout the first half of 2026. Rapid enterprise adoption and scaling of generative AI, together with developments in agentic AI, continues to drive the latest wave of digital transformation. Gartner expects global AI spending to reach close to USD1.5 trillion in 2025 and to exceed USD2 trillion in 2026, driven primarily by digital infrastructure investment.
For instance, in Italy, domestic and international strategic buyers have increasingly acquired technology companies to accelerate digital transformation, AI capabilities, cloud infrastructure and cybersecurity competencies, with consolidation having allowed companies to achieve operational efficiencies in fintech, Software as a Service (SaaS) and AI-enabled platforms, a trend which is also emerging in Spain.
AI continues to attract the highest levels of investment, with targets ranging from small language models, robotics and agentic AI to AI-driven solutions for industries such as defence tech, health and biotech. AI should not be viewed merely as a vertical but rather as a horizontal enabler across all tech subsectors.
New Urgency for Defence Tech
Rising global tensions and ongoing conflicts have created renewed urgency around enhancing and modernising defence capabilities. This has prompted a step change in funding, and accelerated investment in defence technology start-ups developing technologies such as AI-powered drones, autonomous vehicles and advanced software-enabled weapon systems. The autonomous region of Andalusia is seeing a significant increase in this type of investment, while Madrid continues to keep pace.
The EU is also prioritising investments in defence tech; it announced the ReArm Europe and Readiness 2030 in March 2025, which mark the first co-ordinated EU initiative to boost defence expenditure significantly. The programme aims to increase the EU’s defence spending by an estimated EUR800 billion by April 2029. The majority (over 60%) of the spending is dedicated to AI, surveillance, reconnaissance and advanced analytics.
Space technologies are also attracting increased interest across numerous jurisdictions due to the strategic significance of space for national defence strategies. This encompasses launch-vehicle technologies, communication networks, digital infrastructure, and other essential systems required for effective space operations.
Growing interest in defence tech is accelerating investment in dual-use technologies serving both commercial and national customers. However, the sector presents complex legal challenges, especially as AI becomes more embedded in military systems. Key issues include compliance with international humanitarian law, human oversight of autonomous systems, transparency in classified technologies, and strict export controls and national security reviews. Legal standards remain fragmented and under development.
Complex and Fragmenting Global Regulatory Landscape
As deal-making in the technology industry has become increasingly more global, and with technology often being viewed as a strategic, defence and national security priority, regulators in different jurisdictions have been tightening requirements in their markets. Antitrust authorities have been challenging technology transactions more aggressively, including by scrutinising perceived market dominance, while foreign direct investment (FDI) regulations have been tightened in different parts of the world to protect emerging technologies from being acquired by foreign buyers.
For example, foreign investment regulators have been scrutinising the scope for data centres to provide hostile actors access to sensitive data or control of the data centre to cause disruption or otherwise compromise national security interests. France, Germany, Spain and the UK have adopted stricter requirements for acquisitions of tech companies in their jurisdictions, and the EU has adopted co-ordination regulations across the region through its AI Act for sharing information and collaborating in FDI enforcement.
Merger control in 2026 will be a central factor in US tech M&A, with regulators balancing competition concerns against innovation and investment. Deal-makers must be proactive in addressing antitrust risks, structuring deals to withstand scrutiny and planning for potential regulatory delays. The environment is more predictable for smaller deals, although large-scale tech consolidation is likely to remain under the microscope.
Given the increasing cyber-threat landscape, governments are also focusing on cybersecurity for critical infrastructure. In the EU, there has been a notable increase in cyber-specific regulation. In 2026, it is likely that further developments in cyber-specific regulation in the EU and, in consequence, in Spain, will be seen.
Trends in Tech Exits
Technology companies that decide to continue their journey as independent players on their path to profitability can choose from a range of public market exit strategies:
• an Initial Public Offering (IPO);
• a direct listing; or
• a direct sale.
M&A remained the dominant exit route for tech companies in 2025, given that it generally offers faster liquidity and fewer regulatory hurdles than public market exits, and in 2026 is expected to remain the main exit way.
Private equity has also consolidated its position as a leading alternative exit route to IPOs. Private equity firms continue to target tech companies with recurring revenue models, such as SaaS and infrastructure platforms, and remain active in carve-outs, take-privates and consolidation plays across the sector.
Looking ahead, AI-driven consolidation and increasingly sophisticated deal structures will continue to shape the tech exit landscape, with M&A and secondary markets remaining the preferred paths to liquidity.
Spin-Offs
In 2025, spin-offs gained momentum among tech companies as a strategic way to streamline operations and unlock shareholder value. This reflects a broader shift towards agile and modular corporate structures. While not all spin-offs succeed, they remain a favoured tool for tech firms navigating competitive and financial pressures.
Legal Playground
Spanish M&A legal practices mirror global practice in other leading jurisdictions. A typical acquisition progresses from the initial non-binding Letters of Intent (LOIs) to Share Purchase Agreement (SPA) negotiation and closing. Well-established law firm practices are aligned to compete in the international marketplace and meet foreign investor needs.
Most transactions are structured through Special Purpose Vehicles (SPVs) in order to allow investors, and in certain cases sellers, to benefit from tax efficiencies (tax deductions upon exit or tax deferment schemes in roll-overs), some of them within the EU territories or even limited to them.
Since the approval of Ley 18/2022,de 28 de septiembre, de creación y crecimiento de empresas (18/2022 Spanish Act for the creation and growth of companies), together with regional regulations aimed at fostering investments, a favourable framework has developed. Grants are available alongside private money. The Madrid (4/2024 Act) has also included a package of tax benefits for non-resident investors, aimed at positioning the region as an attractive investment hub.
Legal practice has evolved towards broader acceptance that certain Investment Agreements clauses, such as Drag and Tag, may be incorporated into the company bylaws and therefore may be registered with the Mercantile Registries (Registro Mercantil) with a clear benefit for those clauses being enforceable.
Spain, as an open market, even though influenced by global geopolitical changes and operating within the EU regulatory framework, is a modern and attractive place to establish or initiate investment platforms.
Key Legal Developments Expected for 2026
Some legal measures are expected to be approved and subsequently implemented, with a direct impact on Spanish M&A practice.
One of them is internal, as it is forecast that anti-corruption measures lead to a disclosure of full cap-tables. Currently, only the information related to the company incorporation or derived from capital increases or reductions is publicly available.
Largely expected and currently under discussion within the 28th Regime initiative, the new EU Company is intended to enable the creation of a new pan-European company with reduced requirements and aimed at fostering start-ups and scale-ups. If approved (expected in the first quarter of 2026) the Unified European Company or Societas Europaea Unificata (S.EU), would be available to be voluntarily adopted by unlisted national capital companies. Its features include fully digital incorporation and registration within a maximum period of 48 hours, a minimum capital of EUR1 with alternative creditor-protection mechanisms, the assignment of a unified digital identity and the right to transfer the registered office to another Member State without dissolution or new incorporation.
Equally relevant, the transposition of Directive (EU) 2024/2810 and Directive (EU) 2025/25 which will introduce, respectively, the structures of shares with multiple voting rights for companies accessing small and medium-sized enterprises (SMEs) markets and advanced digital tools in the field of company law.
In addition, the transposition of Directive (EU) 2025/25 on digital tools and processes in the field of company law will have significant practical consequences, including:
Foreign Direct Investment (FDI)
Out of the regulated sectors (defence, telecom, health, critical infrastructures or with a direct impact on national security) which are subject to authorisation once some thresholds are met, Spain remains as a “land of the free” for foreign investors.
Nevertheless, the EU-wide response to the evolving geopolitical situation is likely to lead to changes that may have an impact on FDI.
Among the planned modifications are the obligation to establish a procedure structured in two phases, the power to examine operations already closed and a potential expansion of the strategic sectors subject to control. The FDI regime will continue to have a direct impact on the planning and execution of M&A transactions involving foreign investors, including acquisitions of minority stakes of 10% or more of the share capital in Spanish companies.
FDI controls impact on closing calendars and require suspensive conditions or conditions precedent to be adequately drafted.
Reference should also be made to the approval of the Commission Recommendation (EU) 2025/63 on reviewing outbound investments in technology areas critical for the economic security of the Union on outbound investments related to quantic computing and semiconductors.
Public Markets
The stock market faces 2026 in the context of intense regulatory activity and ongoing transformation of the regulatory framework, both at national and European level, with the aim of facilitating access to markets, strengthening their competitiveness and advancing their integration. In addition to the pending reforms in Spain – such as the extension of the takeover bid regime to MTFs and the transposition of the EU Listing Act – there is the launch of new IPO modalities, such as BME Easy Access, the update of the Corporate Governance Code for Listed Companies, the future regulation of the savings and investment account, consolidation of crypto-asset regulations and market infrastructures based on distributed ledger technology and proposals for the strengthening of ESMA's (European Security and Markets Authority) supervisory role. All this takes place in an environment in which a gradual reactivation of activity in the capital markets is expected.
Regarding BME Easy Access, it will allow direct admission to trading of shares without requiring a minimum prior shareholder disclosure. Companies with a valuation of more than EUR500 million will be able to register the prospectus and admit their shares to trading and will then have a period of up to 18 months to achieve the necessary shareholder diffusion – 25% (dispensable by the CNMV – Spanish Capital Markets authority), which will be reduced to 10% no later than June 2026 as the deadline for transposition into Spanish law. During this period, the trading of shares will be carried out, where appropriate, exclusively between professional investors through blocks until the required shareholder diffusion is reached, at which time the shares will be traded on the Continuous Market, through the Spanish Stock Market Interconnection System (SIBE).
Crypto-Assets
Regulation (EU) 2023/1114 on markets in crypto-assets (MiCA) is, in general, applicable from 30 December 2024, subject to certain exceptions.
Spanish Law 6/2023, of 17 March, on Securities Markets and Investment Services appoints the CNMV as the competent authority responsible for the supervision of compliance with MiCA, without prejudice to the powers of the Bank of Spain with regard to issuers of electronic money and asset referenced tokens.
Crypto-asset service providers are required to be authorised by the CNMV or another competent EU authority. From 1 July 2026, only providers authorised by the CNMV or other European authorities will be permitted to operate.
Types of crypto-assets regulated by MiCA:
MiCA does not apply to financial instruments regulated by MiFID II, non-fungible tokens (NFTs), cryptocurrencies and tokens with limited purposes, digital currencies issued by central banks, or crypto-assets issued by public entities.
Cybersecurity and AI
A number of legal initiatives are expected in the EU and in Spain.
The Omnibus Regulations proposed on Digital and AI current Regulation will try to reduce formalities and bureaucracy for SMEs while protecting individual fundamental rights.
From 2 August 2026, the AI Regulation will begin to be of general application, although some provisions relating to prohibited artificial intelligence practices, designation of national supervisory authorities, general- use models, governance and sanctions have applied since 2025. This milestone marks the entry into force of the first global standard that aims to regulate the use and development of artificial intelligence systems from a risk-based perspective for people's rights and freedoms. In relation to the AI Regulation, however, the Draft Law for the good use and governance of artificial intelligence, which establishes its sanctioning regime and designates the competent market surveillance authorities, remains pending approval. Among these authorities is the Spanish Authority for the Supervision of Artificial Intelligence (AESIA), which is entrusted with the function of issuing guides and support materials that facilitate compliance with the AI Regulation.
Directive NIS 2 is also expected to be transposed into Spanish law within 2026, ensuring a common cybersecurity standard. In addition, the Digital Operation Resilience Act (DORA) Regulation, regarding the financial sector, has a direct impact on the new digital security EU frame.
Due diligence processes must take into account the potential impacts derived from the adoption and entry into force of these new regulations.
eHealth
The digital transformation of the healthcare sector has become an established and irreversible reality in Europe. In this context, steps are being taken in Spain to adapt the regulatory framework to Regulation (EU) 2025/327, on the European Health Data Space (EHDS). The Spanish Draft Digital Health Law is currently being processed, with a double objective: on the one hand, to establish the structure that will allow Spanish operators to participate in the cross-border sharing of health data within the European Union, in order to enable its use both in healthcare and in secondary uses linked to research, development of digital solutions and the evaluation of public health policies; and, on the other hand, to introduce a specific regulatory framework for the use of digital technologies in healthcare. Among the most relevant aspects are
Defence and Infrastructures
Within the new need to invest in defence and defence-related infrastructure, including tech, the Horizon Europe programme and the creation of a new fund of funds by the EU will surely impact the M&A activity.
Public-Private joint efforts are expected and, during 2026, regulations are likely to impact public procurement, project financing, compliance with foreign investment control regulations, the protection of sensitive and dual-use technologies, the protection of confidentiality and trade secrets, and security of supply.
Investors continue to distinguish between pure defence companies and those with dual-use products, a criterion that remains decisive in assessing the level of risk that can be assumed in each operation. This distinction has reinforced due diligence in the face of a regulatory framework transformed by Regulation (EU) 2021/821, which extends the concept of export to intangible technology transfers and requires robust compliance structures.
Foreign direct investments made by EU and EFTA residents continue (until 31 December 2026) to be subject to the prior authorisation regime established in Article 7a of Law 19/2003, provided that the following cumulative requirements are met:
RSM Spain
C/ José Ortega y Gasset, 22-24
28006 Madrid
Spain
+ 34 91 457 02 39
contactorsmspain@rsm.es www.rsm.global/spain/es