Banco Bilbao Vizcaya Argentaria, S.A.

€36,000

Non-compliance with general data processing principles

Date de décision

21 décembre 2020

Autorité

Spanish Data Protection Authority (aepd)

ES

Secteur

Finance, Insurance and Consulting

Pays

ES

Droit

GDPR

Statut

FINAL

Description

The Spanish DPA (AEPD) fined the financial and credit institution Banco Bilbao Vizcaya Argentaria, S.A. (BBVA) with a fine in the amount of EUR 36,000. The BBVA asked the data subject to settle debts with the BBVA, although the data subject did not have any debts with the bank. As a result, BBVA had transmitted the personal data of the data subject to the debt collection company Multigestión Iberia, S.L., which, over a period of several months, contacted the data subject by telephone and e-mail on behalf of BBVA and requested the payment. The data subject then demanded the erasure of his/her data from BBVA. However, the controller refused to do so.

Citations légales

Art. 5 (1)

Questions et violations

Non-compliance with general data processing principles

Restez informé sur l'application de la législation en matière de protection de la vie privée

Nous respectons votre vie privée. Un courriel par mois, pas de spam, désabonnement à tout moment.