- Enforcing jurisdiction
- Spain · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Banco Bilbao Vizcaya Argentaria, S.A. – €36,000 Fine (Spain, 2020)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Banco Bilbao Vizcaya Argentaria (BBVA) was fined €36,000 for wrongfully contacting a person about debts they didn't owe. The bank mistakenly shared the person's data with a debt collection agency, causing distress. This case shows that companies must be careful when handling personal data to avoid unnecessary harm.
What happened
BBVA transmitted personal data of a person to a debt collection agency despite the person having no debts.
Who was affected
A person who was incorrectly contacted by BBVA regarding non-existent debts.
What the authority found
The Spanish data protection authority ruled that BBVA violated GDPR by improperly handling personal data.
Why this matters
This case highlights the need for companies to verify information before sharing it with third parties. It reminds businesses to be diligent in their data management practices.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 12 March 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Spanish DPA (AEPD) fined the financial and credit institution Banco Bilbao Vizcaya Argentaria, S.A. (BBVA) with a fine in the amount of EUR 36,000. The BBVA asked the data subject to settle debts with the BBVA, although the data subject did not have any debts with the bank. As a result, BBVA had transmitted the personal data of the data subject to the debt collection company Multigestión Iberia, S.L., which, over a period of several months, contacted the data subject by telephone and e-mail on behalf of BBVA and requested the payment. The data subject then demanded the erasure of his/her data from BBVA. However, the controller refused to do so.
Related Enforcement Actions (1)
Other enforcement actions involving Banco Bilbao Vizcaya Argentaria, S.A. in ES
Details
Fine Date
21 December 2020
Authority
Agencia Española de Protección de Datos
Fine Amount
€36,000
About this data
Cite as: Cookie Fines. Banco Bilbao Vizcaya Argentaria, S.A. - Spain (2020). Retrieved from cookiefines.eu
Last updated: