AEPD (Spain) · 10 September 2026
CAIXABANK, S.A.
About: Accountability, Transparency
Fine€408,000Violation found
- Regulator
- AEPD (Spain)
- Decided
- 10 September 2026
- Country
- Spain
- Sector
- Not given
- Regulator’s reference
- ps-00028-2025
- Fino case number
- 2026/ES/037
What happened
The DPA fined CaixaBank €408,000 for a violation of the data protection by design principle since the bank’s standard process in inheritance cases required heirs to provide more information than necessary.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 13Information to be provided where personal data are collected from the data subjectRead →
- Art. 25Data protection by design and by defaultRead →
- Art. 30Records of processing activitiesRead →
- Accountability
- Transparency
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2026/ES/037.