Spain

Banco Bilbao Vizcaya Argentaria, SA

24,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-07-20.

Rank · Sector

#153

of 327 in Finance, Insurance and Consulting

Rank · Spain

#326

of 1,079

Rank · All fines

#1,002

of 3,085

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-07-20
Controller / Processor: Banco Bilbao Vizcaya Argentaria, SA
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

BBVA had no legitimate basis for processing the data of the data subject and had therefore infringed Article 6(1) of the GDPR, since the company processed solvency and credit information files without a prior contractual relationship with the data subject.

Open original source Links to the regulator's original publication or another source.