Banco Bilbao Vizcaya Argentaria, S.A.
€5,000,000
Insufficient fulfilment of information obligations
Dato for beslutning
11. december 2020
Myndighed
Spanish Data Protection Authority (aepd)
ES
Sektor
Finance, Insurance and Consulting
Land
ES
Lovgivning
GDPRStatus
FINALBeskrivelse
The Spanish DPA (AEPD) fined Banco Bilbao Vizcaya Argentaria, S.A. EUR 5,000,000 for violating Art. 6 GDPR (EUR 3,000,000) and Art. 13 GDPR (EUR 2,000,000). The bank had not implemented a specific mechanism to obtain the consent of the customers to process their data. Furthermore, it did not use precise terminology in its privacy policy, nor did it provide adequate information about the type of personal data that might be processed. In particular the AEPD notes that the purpose and legal basis for data processing are not sufficiently identifiable in the privacy statement.
Juridiske citater
Art. 6Art. 13
Problemer og overtrædelser
Insufficient fulfilment of information obligations