Italian DPA fines BBVA EUR 5 508 000 for failing to respect a customer’s objection to direct marketing
Italy's data protection authority fined BBVA's Italian branch over 5.5 million euros after the bank continued direct marketing to a customer who had formally objected to it. The decision cites violations of GDPR principles covering data processing, transparency, the right to object, and controller accountability.
Why this matters: When you tell a company to stop marketing to you, GDPR says they have to stop. That is not a suggestion. BBVA kept going anyway, and now faces a fine large enough to get attention in boardrooms across Europe. The real point here is accountability: the right to object only works if refusing it costs something real. This fine says it does. Any company running direct marketing campaigns in Europe should be looking at how it handles opt-outs right now.
Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.