CAIXABANK PAYMENTS & CONSUMER EFC, EP, S.A.U. – €200,000 Fine (Spain, 2023)

€200,000Agencia Española de Protección de Datos13 November 2023Spain
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

CAIXABANK PAYMENTS & CONSUMER EFC, EP, S.A.U. was fined €200,000 for including a person's personal data in a credit reporting register without proper legal grounds. This matters because it shows that companies must have a valid reason to use someone's data, especially when legal disputes are ongoing.

What happened

CAIXABANK included a person's personal data in a credit reporting register without a sufficient legal basis.

Who was affected

A person whose personal data was included in the credit reporting register by CAIXABANK.

What the authority found

The Spanish DPA ruled that CAIXABANK lacked a valid legal basis for processing the person's data, violating GDPR requirements.

Why this matters

This case highlights the importance of having a valid reason for using personal data, especially during legal disputes. Companies should ensure they have proper justifications before processing personal information.

GDPR Articles Cited

AI-verified

Art. 6(1) GDPR
View original scraped data
Art. 6 GDPR

Original data from scraper before AI verification against source document.

National Law Articles

AI-identified

Art. 65.4 LOPDGDD
Source verified 6 March 2026
articles corrected
national law identified
Full Legal Summary
Detailed

The Spanish DPA has imposed a fine of EUR 200,000 on CAIXABANK PAYMENTS & CONSUMER EFC, EP, S.A.U.. The controller had included the data subject's personal data in a credit reporting register without a sufficient legal basis. The controller justified this with alleged debts that the data subject had with the controller. In fact, however, the parties were still involved in ongoing court proceedings.

Related Enforcement Actions (1)

Other enforcement actions involving CAIXABANK PAYMENTS & CONSUMER EFC, EP, S.A.U. in ES

Details

Fine Date

13 November 2023

Authority

Agencia Española de Protección de Datos

Fine Amount

€200,000

Enforcement Tracker ID

ETid-2214

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. CAIXABANK PAYMENTS & CONSUMER EFC, EP, S.A.U. - Spain (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: