Home / People / Miguel Recio
Portrait of Miguel Recio

Miguel Recio


CMS Albiñana & Suárez de Lezo
Paseo de Recoletos 7–9
28004 Madrid
Languages Spanish, English

Miguel Recio is an Associate of the TMC department at CMS Albiñana & Suárez de Lezo, specialising in personal data protection and e-commerce.

He possesses vast experience as a specialist lawyer in ICT and, most notably, in advising on the creation of data protection compliance programmes and policies, privacy policies, the alignment of purchasing processes to the applicable legislation and the requirements imposed on service providers under the Spanish Information Society Services Act. 

He carried out his PhD thesis on data protection officers and relevant questions for the development of their future legal status at Universidad CEU San Pablo under the supervision of José Luis Piñar Mañas (cum laude distinction).

He is an associate professor of the Law Faculty at Universidad CEU San Pablo, lecturing on ICT management, cybersecurity and ethical hacking. He is also a member of the group of lecturers for the International Master's Degree in Data Protection, Transparency and Access to Public Information.

more less

Relevant experience

Miguel advises leading national and internacional companies on a daily basis on data protection, privacy and techology matters, including the creation of data protection policies and the implementation of procedures aimed at developing compliance programmes, advice on the implementation to the GDPR and other local data protection regulations around the globe, including obtaining authorisation for international data transfers, defence in sanctioning proceedings before the Spanish Data Protection Agency, in-house training on personal data protection and cybersecurity and analysis on draft data protection regulations, among others.

more less

Memberships & Roles

  • Member of the Spanish Privacy Association (APEP).
more less


  • He regularly collaborates with general and specialised media in his area of ​​practice, publishing on matters such as technology, e-commerce, data protection and privacy.
more less

Lectures list

  • Miguel has presented on personal data protection, cloud computing and cybersecurity at countless national and international conferences.
more less


  • Doctor of Law with thesis entitled "Analysis of data protection officers and relevant questions for the development of their future legal status", Universidad CEU San Pablo, Madrid (Spain).
  • 2014 - Master's Degree in Data Protection, Transparency and Access to Public Information, Universidad CEU San Pablo, Madrid (Spain).
  • 2008 - LL.M. in Intellectual Property, George Washington University Law School, Washington (United States). 
  • 2000 - Graduate of Law, Universidad Carlos III, Madrid (Spain).
more less


Brexit: im­plic­a­tions for data pro­tec­tion
Miguel Re­cio On the 24th of Decem­ber 2020, the European Uni­on (EU) and the United King­dom reached a last-minute deal on Brexit. In­ter­est­ingly, the UK-EU Trade and Co­oper­a­tion Agree­ment is the first time...
In­ter­na­tion­al data flows after Schrems II: chal­lenges and solu­tions
CMS Spain in­vites you to join a we­bin­ar in Eng­lish and Span­ish, which will ana­lyse the latest de­vel­op­ments in in­ter­na­tion­al data trans­fers in the EU, in­clud­ing the Schrems II case and Brexit.  The Schrems...
Guide on in­ter­na­tion­al data trans­fers – Draw­ing on the Schrems II Case
On 16 Ju­ly 2020, al­most five years after the Safe Har­bour Agree­ment between the European Uni­on and United States was ruled in­val­id, the Court of Justice of the European Uni­on de­livered a judg­ment on...
Gen­er­al Data Pro­tec­tion Reg­u­la­tion: two years of ac­count­ab­il­ity
The date 25 May 2020 marks the second an­niversary since the Gen­er­al Data Pro­tec­tion Reg­u­la­tion (GDPR) be­came ap­plic­able, rep­res­ent­ing a shift from a com­pli­ance veri­fic­a­tion ap­proach to an ac­count­ab­il­ity-based...