The enforcement is almost entirely on the airlines. There may be a random control when entering but it's about as likely as getting pulled in for a customs inspection, something that's never happened to me in Spain as a frequent traveler. Which is not to say the risk is zero, but I would bet more on not being able to board in the first place. The airline definitely will check your card and the Timatic requirements.