Banco Bilbao Vizcaya Argentaria, S.A.
Approved Evidence
Added to Rotten Company: 8/23/2026
Conduct/Event period: May 25, 2018–December 11, 2020
Ongoing: No
Resolution status: Resolved
Resolution date: December 11, 2020
BBVA EUR 5 million GDPR fine for transparency and consent failures
Summary
Spain's Data Protection Agency fined Banco Bilbao Vizcaya Argentaria in December 2020 for GDPR infringements concerning transparency and consent. The AEPD found that BBVA used imprecise privacy-policy terminology, provided insufficient information regarding categories of personal data processed and failed to obtain valid consent in connection with promotional communications. The total sanction was EUR 5 million under proceeding PS/00070/2019. Source: https://www.aepd.es/ and https://cedpo.eu/1985-2/
Evidence Weight
99.73
Severity: high
Recency Weight: 99.72671648425926
File Weight: 1