CaixaBank, S.A.
Approved Evidence
Added to Rotten Company: 8/23/2026
Conduct/Event period: May 25, 2018–January 5, 2021
Ongoing: No
Resolution status: Resolved
Resolution date: January 5, 2021
CaixaBank EUR 6 million GDPR fine for unlawful processing and inadequate information
Summary
Spain's Data Protection Agency imposed two fines totalling EUR 6 million on CaixaBank in 2021 for GDPR violations concerning information provided to customers, the legal basis and consent for personal-data processing, and data-sharing practices. The AEPD found that CaixaBank's information was insufficient and that aspects of its processing lacked a valid legal basis or adequate consent. The sanction arose from AEPD proceeding PS/00477/2019. Sources: https://www.aepd.es/ and https://cefi.es/wp-contenido/uploads/2021/06/Comunicaciones-92.pdf
Evidence Weight
99.73
Severity: high
Recency Weight: 99.7262432052987
File Weight: 1