Spain

IBERCAJA BANCO, S.A.

42,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2025-06-20.

Rank · Sector

#137

of 322 in Finance, Insurance and Consulting

Rank · Spain

#260

of 1,075

Rank · All fines

#784

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2025-06-20
Controller / Processor: IBERCAJA BANCO, S.A.
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 5 (1) f) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Spanish DPA imposed a fine of EUR 42,000 on IBERCAJA BANCO, S.A. During a bank transfer, the controller transmitted more data then necessary to the recipient of the payment. The original fine of EUR 70,000 was reduced to EUR 42,000 due to immediate payment and admission of responsibility by the controller.

Open original source Links to the regulator's original publication or another source.