Italy

Banco Bilbao Vizcaya Argentaria SA

100,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2025-07-10.

Rank · Sector

#90

of 322 in Finance, Insurance and Consulting

Rank · Italy

#84

of 543

Rank · All fines

#492

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2025-07-10
Controller / Processor: Banco Bilbao Vizcaya Argentaria SA
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 12 (3), (4) GDPR, Art. 15 GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

The Italian DPA has imposed a fine of EUR 100,000 on Banco Bilbao Vizcaya Argentaria SA. A customer of the data controller contacted the customer service of the controller, due to the fact that the data subject had been subjected to a fraud concerning a bank transfer in the amount of EUR 9,999. The data subject requested the recordings of phone calls in a defined time period but the controller failed to directly provide those recordings.

Open original source Links to the regulator's original publication or another source.