The Spanish Data Protection Agency sanctions the BANCO BILBAO BISCAIA ARGENTARIA, S.A. entity.
The reasons that led to this event were:
• Failure to comply with the personal data protection regulations by the personal data processing operations carried out.
• Failure to properly inform the customer of the circumstances regulated in Articles 13 and 14 of the General Data Protection Regulation (GDPR) or the latter would not have validly given consent.
For all this a fine of 5,000,000 euros is imposed on it for the infraction of the
articles 6, 13 and 14 of the GDPR, and that within six months it becomes suitable for the
personal data protection regulations processing operations that
performs, the information offered to its customers, the procedure by which
they must give their consent for collection and treatment
of their personal data.