The Spanish DPA (AEPD) fined Banco Bilbao Vizcaya Argentgaria S.A. with EUR 5,000,000 for violating Art. 13 GDPR (EUR 2,000,000) and Art. 6 GDPR (EUR 3,000,000). The bank had not used the precise terminology in its Privacy Policy, and it did not implement the necessary procedures to ask for the consent of the customers regarding the data processing. It also failed to provide the necessary information regarding the type of data it would process. The company’s privacy statement is not sufficiently clear about the legal basis of the data processing.
the spanish dpa aepd  banco bilbao vizcaya argentgaria sa with  for violating     and     the bank had not used the precise terminology in its privacy policy and it did not implement the necessary procedures to ask for the consent of the customers regarding the data processing it also failed to provide the necessary information regarding the type of data it would process the company’s privacy statement is not sufficiently clear about the legal basis of the data processing
 spanish dpa aepd  banco bilbao vizcaya argentgaria sa    violate           bank   use  precise terminology   privacy policy     implement  necessary procedures  ask   consent   customers regard  data process  also fail  provide  necessary information regard  type  data  would process  company’ privacy statement   sufficiently clear   legal basis   data process