CaixaBank EUR 6 million GDPR fine for unlawful processing and inadequate information
Company: CaixaBank, S.A.
Summary
Spain's Data Protection Agency imposed two fines totalling EUR 6 million on CaixaBank in 2021 for GDPR violations concerning information provided to customers, the legal basis and consent for personal-data processing, and data-sharing practices. The AEPD found that CaixaBank's information was insufficient and that aspects of its processing lacked a valid legal basis or adequate consent. The sanction arose from AEPD proceeding PS/00477/2019. Sources: https://www.aepd.es/ and https://cefi.es/wp-contenido/uploads/2021/06/Comunicaciones-92.pdf