Enforcing jurisdiction
Spain · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

BANCO BILBAO VIZCAYA ARGENTARIA, S.A – €56,000 Fine (Spain, 2023)

€56,000Agencia Española de Protección de Datos19 January 2023Spain
reduced
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

Spain's data protection authority fined Banco Bilbao Vizcaya Argentaria for sharing a person's personal data with their spouse without consent. This case is significant because it shows that companies must protect personal data and respect individuals' privacy rights. The fine was reduced due to the bank's voluntary payment.

What happened

Banco Bilbao Vizcaya Argentaria disclosed a person's personal data to their spouse without obtaining consent.

Who was affected

An individual whose personal data was shared without their consent.

What the authority found

The Spanish DPA found that the bank violated GDPR by not ensuring proper consent before sharing personal data.

Why this matters

This case serves as a warning to financial institutions about the importance of safeguarding personal data and obtaining consent before sharing information. Companies should review their data sharing policies to avoid similar violations.

Recorded legal citations
Automatically processed
Art. 32 GDPR
Art. 5(1)(f) GDPR
View original scraped data
Art. 5(1) f) GDPR
Art. 32(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 12 March 2026.

Processing notes: national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Spanish DPA has imposed a fine on BANCO BILBAO VIZCAYA ARGENTARIA, S.A.. An individual had filed a complaint with the DPA because the controller had disclosed their personal data to their spouse without their consent. The original fine of EUR 70,000 was reduced to EUR 56,000 due to the voluntary payment.

Related Enforcement Actions (0)

No other enforcement actions found for BANCO BILBAO VIZCAYA ARGENTARIA, S.A in ES

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

19 January 2023

Authority

Agencia Española de Protección de Datos

Fine Amount

€56,000

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. BANCO BILBAO VIZCAYA ARGENTARIA, S.A - Spain (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: