CAIXABANK, S.A.: Insufficient technical and organisational measures to ensure information security

€400,000 fine - Spanish Data Protection Authority (aepd)

€400,000 Fine

CAIXABANK, S.A.

Spain

Insufficient technical and organisational measures to ensure information security

Art. 5, Art. 25

Finance, Insurance and Consulting

Insurance Supervisory Authorities

Apr 15, 2026 Source

Summary

Art. 5 (1) f) GDPR, Art. 25 GDPR · Sector: Finance, Insurance and Consulting · Decided 2026-04-15

View full content at source www.enforcementtracker.com

Related across sources

News AEPD (Spain) - PS-00020-2025 GDPRhub News The Italian SA fined Poste Vita for data breach European Data Protection Board Guidance Guidelines 01/2022 on data subject rights - Right of access EDPB Guidance Guidelines 8/2022 on identifying a controller or processor's lead supervisory authority EDPB Guidance Guidelines 4/2019 on Article 25 Data Protection by Design and by Default Version 2.0 Adopted on 20 October 2020 EDPB Guidance Guidelines 01/2021 EDPB

Similar Content