If you are responsible for security or prevention, your self-protection plan probably still cites Spanish Royal Decree 393/2007. And someone has probably told you that this regulation no longer exists. Both statements describe a transitional situation that has been causing confusion in the sector since 2023.
It is worth clearing up. A hasty reading can lead you to rewrite documentation before it is necessary; waiting without preparing anything is not a good strategy either.
What actually happened
Royal Decree 524/2023, of 20 June, approved the Basic Civil Protection Standard and came into force on 11 July 2023. Its sole repealing provision listed the Basic Self-Protection Standard approved by RD 393/2007 among the regulations it repealed.
At the same time, the first final provision established that the planning guidelines and the Basic Self-Protection Standard in force when the new royal decree took effect had to be adapted within a maximum of four years. That horizon places the transition in July 2027.
The key idea: the framework is in transition. RD 393/2007 remains the operational reference while the instrument meant to replace it is developed, but each case should be reviewed against the applicable regional legislation.
What it means for your plan today
Your plan does not stop being useful because it cites RD 393/2007. There is no general obligation to immediately rewrite its entire structure simply because RD 524/2023 came into force. You do have to keep it up to date in line with whatever obligations apply to you.
Implementation has not stopped. Drills, training, maintenance and periodic review remain essential for the plan to be operational and to hold up under an inspection or, more importantly, during a real emergency.
Regional legislation is still decisive. Regional decrees, their catalogues of activities subject to the obligation and the criteria of the competent bodies can introduce specific requirements. If you operate across several regions, that regulatory fragmentation calls for particularly careful management.
Where the change is heading
Although the full adaptation of the self-protection framework is still pending, RD 524/2023 makes the direction clear: consistency across plans, a common catalogue of risks, and integration between the different levels of planning.
A self-protection plan stops being just a document you file away and produce on request. It has to fit into higher-level planning, exchange information, maintain shared criteria and show what was done and when.
What to do during the transition
The advice we give our clients is simple: do not wait. Not because there is any immediate regulatory urgency, but because the ability to update, integrate and audit a plan depends more on how it is managed than on how it is written.
A plan that lives only as a PDF in a shared folder may well comply today, but any change means reopening the document, tracking down the versions in circulation and redistributing the updates. That work multiplies with every site and every region.
A digitalised plan, with its phases turned into tasks, its owners assigned by role and its history of activations and drills on record, lets you change only what actually changes. It can also demonstrate what was carried out, by whom and with what evidence.
The time until 2027 does not have to be time spent waiting. It can be the window you use to reach the new stage prepared, rather than facing a rushed migration.
Informational content reviewed on 10 September 2026. See the consolidated text of RD 524/2023 in the BOE and confirm how it applies with the competent body or your legal advisers.
Turn your plan into a living procedure
VES Flow turns the phases of your plan into tasks, owners and traceable evidence.
