Enforcing jurisdiction
Spain · Geography does not establish applicable law.
Confirmed applicable legislation

Banco Bilbao Vizcaya Argentaria S.A. – €60,000 Fine (Spain, 2021)

€60,000Agencia Española de Protección de Datos16 December 2021Spain
reduced
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

Banco Bilbao Vizcaya Argentaria S.A. was fined €60,000 for sending unsolicited SMS messages to a person who had no contract with them. This is important because it shows that companies must respect people's privacy and not contact them without permission.

What happened

The bank sent repeated SMS messages about non-payments to a person without a contractual relationship.

Who was affected

A person who received unsolicited SMS messages from the bank.

What the authority found

The Spanish data protection authority found that the bank violated privacy rules by sending messages without a valid reason.

Why this matters

This ruling serves as a reminder for businesses to ensure they have proper consent before contacting individuals. Companies should review their communication practices to avoid similar issues.

Recorded legal citations
Automatically processed
Art. 6 GDPR
View original scraped data
Art. 6(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 12 March 2026.

Processing notes: national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Spanish DPA (AEPD) has imposed a fine on Banco Bilbao Vizcaya Argentaria S.A.. A data subject filed a complaint with the DPA due to the fact that the controller repeatedly sent him SMS messages about non-payments, although he had no contractual relationship with the controller. The controller stated that the unsolicited SMS messages were sent due to human error on part of its employees. The original fine of EUR 100,000 was reduced to EUR 60,000 due to voluntary payment and admission of guilt.

Related Enforcement Actions (0)

No other enforcement actions found for Banco Bilbao Vizcaya Argentaria S.A. in ES

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

16 December 2021

Authority

Agencia Española de Protección de Datos

Fine Amount

€60,000

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Banco Bilbao Vizcaya Argentaria S.A. - Spain (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: