The Spanish Data Protection Authority (AEPD) imposed a total fine of 6.000.000 € on CAIXABANK, S.A., for unlawfully processing clients personal data (4.000.000 €) and not providing sufficient information regarding the processing of personal data (2.000.000 €).

https://edpb.europa.eu/news/national-news/2021/spanish-data-protection-authority-aepd-imposes-fine-6000000-eur-caixabank-sa_en