Italian DPA fines BBVA €5.508 million for ignoring customer objection to direct marketing
The fine underscores the obligation of controllers to promptly respect data subject objections and implement effective technical measures.
ADTP Regulatory Watch· October 9, 2026· Italian Data Protection Authority
ImpactHigh 63
Type💰 Fine
Statusin effectin force
JurisdictionEU-IT
Effective3 July 2026
What happened
The Italian Data Protection Authority issued an administrative fine of €5,508,000 against BBVA's Italian branch for failing to honor a customer's right to object to direct marketing. The violation lasted seven months, during which the customer received at least ten unsolicited notifications despite having objected via the bank's app and customer service.
Penalty
administrative fine of EUR 5 508 000
Why it matters for trust and compliance
Its status is in effect. It is in force now.
The fine underscores the obligation of controllers to promptly respect data subject objections and implement effective technical measures.
Takes effect July 3, 2026.
Penalty: administrative fine of EUR 5 508 000.
It relates to GDPR. The regulations library explains what that law requires.
Who is affected
financial servicescontrollerBanco Bilbao Vizcaya Argentaria, S.A., Italian branch (BBVA)
Recommended actions
Check that privacy notices describe the practices this addresses.
Confirm access, correction, deletion and opt-out requests are handled within the required time.