Authority
AEPD
Country
Spain
Date Issued
January 13, 2021
Industry
Finance
Summary
CaixaBank was fined €6 million by the AEPD for processing customer data for commercial purposes without obtaining valid consent following its merger with Bankia. The company unlawfully used customer information for marketing and other commercial activities without establishing a proper legal basis.
Violation Types
ConsentData ProcessingLegal Basis
Articles Violated
Art. 6 GDPRArt. 7 GDPR
Avoid enforcement risk with automated compliance
IQWorks helps organizations automate GDPR compliance before regulators come knocking.
Talk to an Expert