elnatro parent
If they want to operate in Spain, yes.
I'm not familiar with Spanish law, but you can see the problem with forcing a company to provide details of customers that are from a different country.
It's a bit like the UK demanding that Apple gave them access to user data of all customers worldwide. Apple correctly told them no and stopped offering end-to-end encryption to UK users.
So, following your example, CloudFlare should stop offering the service to Spanish clients that allow them to break the law.