Regulation · Spain · Universities and student rights
New university statute: mandatory protocols and expanded student rights
Royal Decree 855/2026 replaces the 2010 statute and applies across Spain's university system. It strengthens careers guidance, mental-health support, inclusion and academic transparency, and requires specific protocols on suicidal behaviour, harassment and cyber-harassment.
- Source published
- Effective date or period
- In force from 23 Oct 2026
- Article on this portal
Royal Decree 855/2026 in force · Basic state legislation

Our interpretation
Why it matters
This is binding state legislation for public and private universities and their own, affiliated and continuing-education centres. Required protocols must be approved, operational or adapted within six months; the general period for adapting rules and services is twelve months.
Editorial recommendation
What to do
Universities should immediately review their protocols, support units, work-life-study plans, course guides, assessment rules and information channels. The specific protocol deadline is 23 April 2027 and the general adaptation period ends on 23 October 2027.
Verified facts
Territory, instrument, publication and legal status
Spain. Royal Decree 855/2026 of 21 October was published in issue 262 of the Spanish Official Gazette on 22 October 2026 and enters into force on 23 October. It approves the new University Student Statute, expressly repeals Royal Decree 1791/2010 and constitutes basic state legislation, except for Chapter XII.
It is binding legislation in force, not a draft, guide, recommendation or voluntary call. It covers public and private universities, their own and affiliated centres, continuing-education centres and every teaching mode. It also extends to own or affiliated centres of Spanish universities abroad, subject to the applicable agreements.
Verified facts
Three mandatory protocols within six months
Article 10 requires universities to maintain three separate protocols. Existing related instruments must be adapted or developed where necessary so that every required area is expressly covered.
- Action, prevention and intervention in relation to suicidal behaviour.
- Prevention and response to sexual harassment and cyber-harassment, and harassment based on sex, sexual orientation or identity, gender expression or sex characteristics.
- Response to personal harassment in the university environment (bullying).
- Maximum period: six months from commencement. With commencement on 23 October 2026, the protocols must be approved and operational no later than 23 April 2027.
Verified facts
Rights and services universities must secure
- Free and accessible psychological and mental-health guidance and support, coordinated with regional public health services.
- Support units for disability, specific educational-support needs and learning difficulties, as well as careers guidance and gender equality.
- Accessible information on the institutional website about student rights and representation.
- Student work-life-study plans supporting study, employment and family life within organisational and budgetary constraints.
- Course guides available before enrolment covering language, mode, content, assessment, placements, timetables, tutorials and responsible teaching staff.
- Objective assessment, transparent rules, grade review and complaint mechanisms.
Editorial analysis
Artificial intelligence and student duties
The Statute requires students to refrain from using or assisting fraudulent procedures in assessment, coursework or official university documents, expressly mentioning inappropriate use of generative artificial intelligence and information and communication technologies.
It does not impose a general ban on AI. Universities must give the rule practical effect through their academic and assessment policies while preserving prior transparency, objectivity and review mechanisms.
Verified facts
Required action and deadlines
The portal's regional school-bullying tool is unchanged because it is designed for non-university schools and regional child-protection protocols. The new university duty is added to the state regulation catalogue and analysed separately so that the two regimes are not conflated.
- 23 October 2026: Royal Decree enters into force.
- 23 April 2027: deadline to approve, activate or adapt the three Article 10 protocols.
- 23 October 2027: end of the twelve-month period for adapting other affected university rules and establishing the necessary units, services or organisational arrangements.
- Universities must involve student representatives in preparing rules that affect students, as required by the applicable legislation.
Primary source and reading standard
Spanish Official Gazette · Royal Decree 855/2026 of 21 OctoberCheck the original document and its date before acting. The portal’s proposals are labelled as editorial recommendations and do not replace applicable rules.
Disclosure: Luis Manuel Tolmos has a professional connection with Brains International Schools, described in his profile. This analysis is independent.
Continue the conversation
Share a reflection, question or experience related to this conversation.
Comments are reviewed before publication and shared across the Spanish and English editions. Do not include children’s personal data, confidential information, personal attacks or advertising.
Loading discussion…