Banking Law And Digital Exclusion In Banking Spain

Introduction

Digital exclusion in banking occurs when a person cannot reasonably access or use banking services because those services depend mainly on technology. In Spain, banks increasingly use mobile applications, online banking, digital identity checks, automated call centres, online-only product applications, and app-based fraud reporting. These systems can be efficient, but they may create serious difficulties for older people, persons with disabilities, rural residents, customers with low digital literacy, and people without reliable internet access.

Digital exclusion can cause real harm. A customer may be unable to open a basic account, receive a pension payment, make an urgent transfer, report fraud, understand account terms, or contact a human employee. Where the exclusion is unjustified, it may create consumer-law, banking-law, equality-law, data-protection, and contractual issues.

Spanish banking regulation aims to encourage innovation while protecting access to essential financial services. A bank may modernise its services, but it must not use digitalisation in a way that unfairly prevents customers from using basic banking facilities.

Legal And Regulatory Framework

1. Banking Supervision And Customer Protection

Banco de España supervises credit institutions in Spain within the wider European banking framework. Law 10/2014 on the organisation, supervision, and solvency of credit institutions requires banks to maintain sound governance and proper conduct towards customers.

Digitalisation must be managed as a customer-protection risk. A bank should assess whether its digital strategy creates barriers for vulnerable customers and whether reasonable alternatives remain available.

Important alternatives may include:

Branch or assisted-service access

Telephone support with trained staff

Paper statements on request

Accessible ATMs

Clear fraud-reporting channels

Human review of account restrictions

Non-biometric identity-verification options

A digital service should add convenience, not eliminate essential banking access.

2. Basic Payment Accounts

Spain protects access to basic payment accounts through the EU Payment Accounts Directive and its national implementation. Royal Decree-Law 19/2017 and Royal Decree 164/2019 establish rules on payment accounts and access to basic banking services.

A basic payment account may allow customers to deposit funds, withdraw cash, receive payments, and make ordinary payment transactions. This framework is particularly important for customers at risk of financial exclusion.

Banks cannot reject an eligible customer merely because the customer has a low income, limited financial knowledge, or a preference for non-digital assistance. However, banks may apply lawful anti-money-laundering checks and other justified restrictions.

3. Consumer Law And Fair Digital Terms

The Spanish Consumer and User Protection Act, contained in Royal Legislative Decree 1/2007, prohibits unfair contractual terms and requires clear pre-contractual information.

Digital banking creates risks where important terms are hidden in long app screens, small text, confusing consent buttons, or electronic notices that customers may not understand. A bank must communicate charges, account restrictions, changes to service conditions, and customer obligations clearly.

A clause that effectively forces a customer to use an inaccessible app, or removes practical access to support, may be challenged as unfair if it creates a significant imbalance against the consumer.

4. Disability Access And Equality

Digital exclusion may amount to indirect discrimination where a bank’s apparently neutral technology requirement disadvantages persons with disabilities, older persons, or another protected group without adequate justification.

Spain’s Law 15/2022 on equal treatment and non-discrimination strengthens protection against discriminatory treatment. In addition, accessibility rules linked to the European Accessibility Act require many consumer-facing digital services to become more accessible.

For banks, accessibility should include screen-reader compatibility, readable text, high-contrast design, accessible authentication, and support for customers who cannot use facial recognition, fingerprints, or digital signatures.

5. Data Protection And Automated Decisions

The GDPR and Spanish Organic Law 3/2018 protect customer data. Banks frequently use data analytics to identify customers, assess creditworthiness, monitor fraud, and personalise offers.

Automated systems can exclude customers when data is inaccurate, incomplete, or biased. A customer may be wrongly rejected for an account, denied credit, or locked out because an algorithm has identified an unusual risk pattern.

Banks must ensure that automated processing is lawful, transparent, secure, and subject to appropriate safeguards. Significant decisions should have a route for human intervention and challenge.

6. Payment Services And Fraud Support

Digital exclusion also arises when banks move payment services and fraud claims entirely online. Under Spanish payment-services rules, customers must be able to report unauthorised transactions and seek correction.

A bank should not make a fraud victim’s rights ineffective by requiring the customer to use an app they cannot access. Accessible reporting routes are particularly important for elderly customers and persons who lose access to a device after theft, hacking, or SIM-swap fraud.

Key Issues And Principles

1. Reasonable Alternatives

A bank does not need to preserve every traditional method forever. However, it should provide reasonable non-digital or assisted options for essential services where customers face genuine barriers.

2. Accessibility By Design

Accessibility should be built into a banking app before launch, rather than offered only after a customer complains. This reduces legal risk and improves service quality.

3. Human Contact And Review

Automated systems should not become an absolute barrier. Customers need a human contact point where an account is frozen, an identity check fails, or a fraud complaint is rejected.

4. Rural And Elderly Customers

Branch closures and reduced cash access may have a stronger effect in rural areas and on elderly customers. Banks should assess the cumulative effect of digital-only services, branch closures, and limited public transport.

5. Remedies And Evidence

A customer claiming harm should preserve evidence, including screenshots, app messages, call records, account statements, rejected identity checks, and financial losses. Possible remedies may include correction of the error, restoration of access, reimbursement, cancellation of unfair terms, and damages where loss is proven.

Case Laws

1. Banco Español de Crédito SA v Camino, Case C-618/10 (CJEU, 2012)

The Court held that national courts must examine unfair consumer-contract terms.

Relevance: Digital banking terms cannot unfairly restrict practical access to banking services or customer remedies.

2. Aziz v Caixa d’Estalvis de Catalunya, Case C-415/11 (CJEU, 2013)

The Court emphasised effective consumer protection against unfair contractual practices.

Relevance: Customers must have real and effective remedies where digital banking processes cause unfair exclusion or harm.

3. DenizBank AG v Verein für Konsumenteninformation, Case C-287/19 (CJEU, 2021)

The Court examined communication of changes to payment-service terms.

Relevance: Banks must use clear and accessible methods when notifying customers about digital service changes.

4. SCHUFA Holding AG, Case C-634/21 (CJEU, 2023)

The Court examined automated credit scoring affecting individuals.

Relevance: A bank must carefully govern automated systems that may exclude customers from credit or banking services.

5. CHEZ Razpredelenie Bulgaria, Case C-83/14 (CJEU, 2015)

The Court considered indirect discrimination caused by a practice affecting a particular community.

Relevance: A technology policy may be unlawful if it disproportionately disadvantages a protected group without objective justification.

6. HK Danmark, Joined Cases C-335/11 and C-337/11 (CJEU, 2013)

The Court considered reasonable accommodation for persons with disabilities.

Relevance: Banks should provide practical adjustments where a customer cannot use ordinary digital systems because of disability.

7. Google Spain SL v AEPD, Case C-131/12 (CJEU, 2014)

The Court recognised important rights concerning personal data.

Relevance: Customers should be able to access, correct, and challenge inaccurate data that prevents them from using banking services.

Conclusion

Digital banking is an important part of Spain’s financial system, but it must not create a new form of financial exclusion. Banks should combine innovation with accessible design, human support, fair contract terms, responsible automation, and effective complaint procedures.

The strongest legal approach is not to reject digital banking, but to ensure that every customer can still access essential financial services with dignity, security, and meaningful choice.