# Banco Bilbao Vizcaya Argentaria S.L.: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2022-08-02
- Original: https://www.enforcementtracker.com/ETid-1320
- Canonical: https://overview.legal/posts/47435
- Topics: Personal Data, Direct Marketing, Processing Agreement, Insurance, Processing, Supervisory Authorities

## Summary

The Spanish DPA has imposed a fine on Banco Bilbao Vizcaya Argentaria, S.A.. The company had repeatedly sent advertising messages to a data subject, although the data subject had objected to the processing of their data. The original fine of EUR 70,000 was reduced to EUR 42,000 due to voluntary payment and admission of responsibility.

## Full text

The Spanish DPA has imposed a fine on Banco Bilbao Vizcaya Argentaria, S.A.. The company had repeatedly sent advertising messages to a data subject, although the data subject had objected to the processing of their data. The original fine of EUR 70,000 was reduced to EUR 42,000 due to voluntary payment and admission of responsibility.

GDPR Articles: Art. 6 GDPR
Industry: Finance, Insurance and Consulting

---
Generated by overview.legal · https://overview.legal/posts/47435 · 2026-08-22