Regulatory market assessment: can you actually sell it here?
The question conventional market research never asks. Demand is irrelevant if the product needs an authorisation you do not have, a label you cannot produce, or a representative you have not appointed.
A market study that reports strong demand and healthy margins is worthless if the product requires a Spanish authorisation that takes eighteen months, or an EU-established representative the company has not appointed, or a technical file nobody has assembled. This happens more often than it should, because commercial research and regulatory analysis are usually bought from different firms at different times — and the regulatory one comes second.
A regulatory market assessment answers one question before you spend anything else: under what conditions, if any, can this be lawfully sold in Spain, by whom, and how long does it take to get there?
The three layers that apply.
Regional competence is not a formality in Spain.
Authorisations, consumer information duties, licensing and inspection frequently sit with the autonomous community rather than the state. A product cleared nationally can still face a regional requirement in the very region you chose as a beachhead — which is why regulatory and regional analysis belong together.
What the assessment establishes.
- Is the activity regulated in Spain, and under which framework
- What authorisation, licence or registration is required before placing the product or service on the market
- Which authority supervises it — state, regional, or sector-specific
- Whether an EU-established entity or representative is required for a non-EU provider
- What the timeline is for obtaining what is needed, realistically
- What labelling, language and consumer-information duties attach in Spain
- What data protection obligations the model creates, including consent and any representation duty
- What advertising and claim restrictions apply to the category
- What the penalty exposure looks like if it goes wrong
- Whether foreign investment screening applies, if the route in is an acquisition
Where this most often changes the plan.
| Sector or model | What tends to surface |
|---|---|
| AI systems and models | EU AI Act classification, and whether a non-EU provider needs an EU entity or authorised representative |
| Health, wellbeing, supplements | Authorisation and claim restrictions; regional competence; national and EU claim rules |
| Financial and payment services | Licensing or passporting, and conduct requirements |
| Food and beverage | Registration, labelling and language duties, regional inspection |
| Consumer products generally | Conformity, guarantee and withdrawal rights that exceed non-EU norms |
| Data-intensive services | Consent architecture, lawful basis, and Spanish enforcement practice |
| Entry by acquisition | Foreign investment screening and prior authorisation in listed sectors |
How it is done.
This is analysis, not a legal opinion.
We establish the regulatory position, the path and the timeline so you can make a commercial decision with your eyes open. Where a matter requires a formal opinion, a licence application or representation before an authority, that is work for a qualified specialist in that field, and the assessment will say so and say why.
Several regimes require a presence in the EU before you can supply.
Where the assessment concludes that an EU-established entity or representative is needed, we can establish it — incorporation, tax activation and registration handled by the same team.
- BOE
- Boletin Oficial del Estado — the official gazette. The regulatory position is established here, not in commentary.
- DOUE / EUR-Lex
- EU official journal and legal database for regulations and directives in their current consolidated form.
- Boletines autonomicos
- Regional official gazettes, where regional competence is exercised.
- AEPD
- Spanish data protection authority; its guidance and published sanctions show enforcement practice, not just the rule.
- AESIA
- The Spanish AI supervision agency — the first EU body dedicated specifically to AI.
- Autocontrol
- Advertising self-regulation, which shapes what claims a category will tolerate in practice.
Is this legal advice?
Do EU rules apply to us if we are not established in the EU?
How long does an assessment take?
Can you assess a route in by acquisition rather than incorporation?
The rest of the practice.
Demand is only half the question. Permission is the other half.
Scope an assessment ↗Alexander Baranov
Seventeen years designing and delivering cross-border corporate structures — incorporation, tax, holding, banking and market entry — for founders and companies expanding into Spain and the EU. Author of professional books on entering the Spanish market.
More about Voixa and the team ↗