AEPD fines bank 6M euros over data processing

Spain's data protection authority, the Agencia Española de Protección de Datos, issued a 6 million euro fine to CaixaBank for violations of the EU General Data Protection Regulation. It's the highest fine to date issued by the AEPD. The bank breached Articles 6, 13 and 14 of the GDPR with its improper data processing practices and collection of user data without explicit consent. In addition to the fine, CaixaBank will need to bring its data processing into compliance within six months.