Banking Law and ESG-Linked Executive Liability in Spain

1. Meaning of ESG-Linked Executive Liability

ESG means:

• E – Environmental: climate change, pollution, emissions, environmental damage, transition risk and physical climate risk.
• S – Social: employee rights, customer protection, financial inclusion, human rights and responsible lending.
• G – Governance: board accountability, internal controls, remuneration, conflicts of interest, transparency, risk management and compliance.

In Spanish banking law, ESG is increasingly treated not merely as a voluntary corporate-social-responsibility issue but as a financial-risk and governance issue.

The central question is therefore:

When can a bank's directors or senior executives become personally liable because they failed to identify, control, disclose or respond appropriately to material ESG risks?

The answer depends upon the type of misconduct.

2. Main Legal Framework in Spain

A. Spanish Companies Act — Ley de Sociedades de Capital

The most important starting point is the Ley de Sociedades de Capital (LSC).

Article 236 establishes that directors can be liable to the company, shareholders and creditors for damage caused by:

1. acts contrary to law;
2. acts contrary to the company's articles;
3. breaches of duties inherent in their office;
4. where there is intentional or negligent conduct.

The provision also covers de facto directors and, in certain circumstances, persons exercising the highest management functions.

This is particularly important for ESG because an executive cannot necessarily avoid responsibility merely by saying:

“The ESG decision was taken by another department.”

If the executive actually exercised decisive management functions, the statutory framework may still become relevant.

3. Duty of Diligence

Spanish directors have a duty to act with the diligence expected from their position.

For banks, this has special importance because ESG risks can become:

• credit risk;
• market risk;
• operational risk;
• liquidity risk;
• reputational risk;
• legal risk;
• strategic risk.

For example, a bank that finances heavily exposed carbon-intensive businesses may face substantial transition risk if regulation rapidly changes.

Similarly, a bank lending against properties exposed to floods or wildfires may face physical climate risk.

Therefore, ignoring material ESG risks can potentially become a conventional banking-governance failure rather than simply an environmental-policy disagreement.

4. Duty of Loyalty

The board must act in the interests of the company.

ESG becomes relevant where directors:

• conceal material environmental liabilities;
• approve misleading sustainability statements;
• manipulate ESG-related performance indicators;
• use ESG-labelled products deceptively;
• ignore serious social or compliance risks;
• create remuneration schemes that encourage excessive ESG risk;
• conceal material climate-related losses;
• fail to establish adequate ESG controls.

A director is not personally liable merely because a bank's ESG strategy turned out to be unsuccessful.

There normally needs to be a legally relevant breach, causation and damage, or a regulatory/criminal violation depending on the claim.

5. Article 237 LSC — Collective/Joint Liability

Article 237 is particularly important for boards.

Directors participating in the harmful decision can generally face solidary liability, subject to the statutory defence for directors who can establish that they did not participate, were unaware of the decision, or took appropriate steps to prevent the harm or expressly opposed it.

ESG example

Suppose the board approves a major financing strategy for a highly polluting sector.

The board has received reports warning of:

• serious climate-transition risk;
• regulatory exposure;
• inadequate borrower disclosures.

Yet the board ignores the warnings.

If the strategy subsequently produces legally recoverable damage, individual directors may have greater exposure than directors who:

• requested additional information;
• voted against the proposal;
• recorded their opposition;
• demanded corrective measures.

Board minutes therefore become extremely important evidence.

6. Article 238 — Social Action

The company can bring an action against directors for damage caused to the company.

This could theoretically become relevant to ESG failures where:

Directors' ESG-related misconduct causes measurable economic damage to the bank.

For example:

Misleading green-finance strategy → regulatory investigation → customer claims → financial losses.

If directors breached their duties and caused the loss, the company may potentially pursue them under the directors' liability framework.

7. Article 240 — Creditor Protection

Spanish law also provides circumstances in which creditors can exercise a derivative action against directors when the company's assets are insufficient to satisfy their claims.

This becomes particularly important where ESG-related mismanagement contributes to serious financial deterioration.

For example:

Failure to address climate-transition risk → deterioration of loan portfolio → substantial losses → insolvency.

The mere existence of climate risk does not automatically create director liability.

The question is whether the directors breached an applicable legal or managerial duty and whether that breach caused legally recoverable damage.

8. Article 241 — Individual Liability

Article 241 preserves individual compensation claims by shareholders and third parties for conduct by directors that directly damages their interests.

This could become important in ESG-related misrepresentation cases.

Example

A bank advertises an investment product as:

“100% environmentally sustainable.”

But senior management knowingly approved materially misleading information.

If an investor directly suffers damage because of that representation, individual liability theories may become relevant.

9. Banking-Specific ESG Regulation

The Spanish framework operates within the EU banking supervisory system.

The EBA Guidelines on the Management of ESG Risks are particularly important.

The guidelines require institutions to identify, measure, manage and monitor ESG risks and establish appropriate internal processes and risk-management arrangements.

They are applicable from 11 January 2026, with a later application date for small and non-complex institutions.

This is highly significant for executive liability because ESG risk management is increasingly becoming part of ordinary prudential risk governance.

10. Role of the Board under the EBA ESG Framework

Senior management and the management body should ensure that ESG risks are incorporated into:

• business strategy;
• risk appetite;
• governance;
• internal controls;
• risk identification;
• risk measurement;
• monitoring;
• reporting;
• scenario analysis;
• transition planning.

The EBA framework expressly treats ESG risks as capable of affecting the safety and soundness of financial institutions.

Therefore, the legal significance of ESG for directors is changing.

Old approach

ESG = corporate responsibility.

Modern banking approach

ESG = potentially material financial and prudential risk.

That distinction is extremely important for executive liability.

11. Banco de España's Role

The Banco de España has incorporated ESG risk into its supervisory work.

It identifies climate risks principally as:

Physical risks

Examples:

• floods;
• drought;
• wildfires;
• extreme temperatures;
• storms.

Transition risks

Examples:

• carbon taxation;
• environmental regulation;
• technological changes;
• changes in consumer preferences;
• stranded assets.

Banco de España states that banks need to be prepared to identify, measure, manage and report climate-related financial risks.

12. Spanish Climate Change Law

Law 7/2021 on Climate Change and Energy Transition is particularly relevant.

Article 32 addresses climate-risk reporting for credit institutions and other financial-sector entities within its scope.

The framework requires reporting concerning the financial impact of climate-related risks, including transition risks and measures adopted to address them.

The law also establishes specific expectations concerning banks' lending and investment portfolios, including decarbonisation objectives aligned with the Paris Agreement from 2023.

Consequently, climate information can become connected with financial governance and accountability.

13. ESG Greenwashing and Executive Liability

One of the most important emerging areas is greenwashing.

Suppose a bank's senior executives approve a product marketed as:

“Green,” “sustainable,” “Paris-aligned,” or “net-zero.”

But internally:

• the portfolio does not meet the advertised criteria;
• exclusions are ignored;
• emissions are materially understated;
• ESG data are knowingly manipulated.

Potential consequences can include:

1. regulatory enforcement;
2. disclosure liability;
3. investor claims;
4. consumer claims;
5. corporate director liability;
6. administrative sanctions;
7. potentially criminal liability in sufficiently serious cases.

The important legal principle is:

ESG liability normally arises from the underlying legal breach, not simply from the fact that the bank performed badly on ESG.

14. ESG and Executive Remuneration

Executive remuneration is another important governance issue.

A bank may link executive bonuses to:

• reduction of financed emissions;
• sustainable-finance targets;
• ESG ratings;
• diversity objectives;
• green lending;
• climate-transition milestones.

This creates legal risk if executives manipulate the underlying metrics.

For example:

Target: 20% increase in sustainable lending.

Executives deliberately classify questionable loans as “green” merely to achieve bonuses.

Potential consequences may involve:

• breach of fiduciary duties;
• misleading disclosures;
• remuneration-related regulatory issues;
• internal disciplinary action;
• investor claims;
• administrative sanctions.

15. Six Important Spanish Case Laws

Case 1 — Banco Popular Executive Remuneration Case

Supreme Court, 16 May 2023

This is one of the most useful banking precedents for ESG-linked governance.

The Supreme Court confirmed a €1 million sanction against Banco Santander as successor to Banco Popular concerning misleading or omitted information in Banco Popular's annual remuneration reports for 2013–2015.

The underlying conduct concerned executive directors' remuneration, including long-term savings arrangements and termination payments.

Earlier CNMV sanctions also imposed individual fines on executive directors, including €25,000 fines on Ángel Ron, Francisco Gómez Martín and Francisco Aparicio Valls, and fines on members of the remuneration committee.

ESG significance

This case demonstrates that:

Governance information is capable of generating regulatory liability.

The principle can extend conceptually to ESG reporting.

If a bank's remuneration report falsely states that executive compensation is linked to sustainability objectives, or conceals relevant ESG incentives, the governance-disclosure risk can become significant.

Case 2 — Banco Popular 2016 Capital Increase Proceedings

Audiencia Nacional — Banco Popular

The Banco Popular proceedings concerning the 2016 capital increase provide an important example of potential executive liability for misleading financial information.

In 2024, the Audiencia Nacional confirmed that the former executive president should stand trial for alleged investor fraud and accounting falsification concerning the capital increase. The court emphasised the importance of the president's executive role in a transaction critical to the bank's operation and survival.

ESG significance

This provides a useful analogy:

If senior executives knowingly approve materially misleading ESG information in connection with:

• green bonds;
• sustainable investment products;
• climate-risk disclosures;
• ESG-linked financing;

the executive's actual participation in the relevant transaction becomes highly important.

The lesson is:

A senior executive cannot automatically escape responsibility by arguing that a transaction was technically handled by another department when the executive exercised substantial decision-making authority.

Case 3 — Pescanova: Supreme Court Judgment, 2023

The Supreme Court's Pescanova judgment of 10 February 2023 is highly relevant to executive accountability.

The former executive president was sentenced to six years' imprisonment for continuing falsification of annual accounts, false economic/financial information and asset concealment.

The Supreme Court also maintained civil compensation exceeding €125 million for injured investors.

ESG significance

Pescanova was not an ESG case.

But its significance for ESG liability is substantial because ESG reporting increasingly forms part of the information environment on which:

• investors;
• creditors;
• regulators;
• customers;

may rely.

The case demonstrates that deliberate distortion of corporate information can create both:

criminal + civil consequences.

ESG analogy

If executives deliberately manipulate:

• carbon data;
• financed-emissions data;
• sustainability metrics;
• ESG classification;
• environmental liabilities;

the same fundamental legal concern arises:

Was information knowingly distorted in a way capable of causing economic harm?

Case 4 — Pescanova: Supreme Court Administrative Sanction

Supreme Court, 4 December 2015

The Supreme Court confirmed a €200,000 fine against the former president of Pescanova for communicating inaccurate, untrue and misleading information to the CNMV.

Importance

This case illustrates that executive accountability can arise independently from broader criminal proceedings.

ESG application

Suppose a listed Spanish bank submits climate-related information to regulators containing materially inaccurate information.

If a senior executive is responsible for approving or transmitting that information, the Pescanova principle provides a useful analogy:

Regulatory disclosure is not merely a communications exercise; inaccurate information can generate personal consequences for responsible executives.

Case 5 — Caja Madrid/Bankia “Black Cards” Case

Supreme Court, 3 October 2018

The Supreme Court confirmed the conviction of former Bankia president Rodrigo Rato and other former directors/executives in the Caja Madrid “black cards” case.

The Court confirmed that the cards were operated through an opaque system, with expenditures not properly reflected in remuneration arrangements or official documentation.

Rato received a four-and-a-half-year prison sentence, and the case involved substantial civil liability.

ESG significance

This is a classic G — Governance precedent.

It demonstrates the legal risks associated with:

• opaque remuneration;
• inadequate controls;
• undisclosed benefits;
• conflicts of interest;
• misuse of institutional resources.

ESG application

Imagine an ESG-linked bonus system where:

executives secretly manipulate sustainability scores to obtain bonuses.

The legal issue would resemble the broader governance concern seen in the black-card case:

opacity + personal benefit + inadequate controls + executive involvement.

Case 6 — Abengoa Executive Remuneration Case

Audiencia Nacional, 12 January 2018

The Audiencia Nacional considered allegations against former Abengoa executives concerning substantial termination payments.

The court ultimately acquitted the executives, finding that the prosecution had not established the alleged dishonest administration or misappropriation and that the remuneration arrangements complied with the applicable legal and contractual framework.

Why this case is important

This case provides the opposite side of executive liability.

It demonstrates that:

A large executive payment, corporate failure or unpopular management decision does not automatically establish personal liability.

There must be a legally established breach.

ESG significance

This is crucial for ESG cases.

A director should not be held liable merely because:

• the bank's ESG strategy failed;
• climate predictions proved wrong;
• a sustainable investment lost money;
• an ESG target was not achieved.

There must be evidence of a relevant legal or fiduciary breach.

16. Seventh Useful Case — STS 665/2020

Supreme Court, Judgment 665/2020, 10 December 2020

The Supreme Court examined the individual liability of administrators.

It held that where an administrator knew of an unjustified double payment and repeatedly refused to return the improperly received amount, individual liability could arise.

ESG relevance

This is useful for the principle of personalised executive responsibility.

A director cannot simply rely on the separate legal personality of the bank when:

• the director personally participates in wrongful conduct;
• knows of the problem;
• has a duty to correct it;
• and deliberately refuses to do so.

That principle can become relevant to ESG-related misconduct.

17. Eighth Useful Case — STS 532/2021

Supreme Court, Judgment 532/2021, 14 July 2021

The Supreme Court analysed administrator liability for company debts under Article 367 LSC.

It identified requirements including:

1. existence of a statutory dissolution ground;
2. failure to call the required shareholders' meeting or seek appropriate insolvency/dissolution measures;
3. expiration of the relevant period;
4. attribution of the omission to the administrator;
5. absence of a justified reason for the omission. 

ESG significance

This illustrates a broader principle:

Executive liability may arise from failure to act, not merely from an affirmative decision.

That is extremely important for climate and ESG governance.

For example:

Known climate risk → board receives repeated warnings → board takes no action → material financial deterioration.

The question becomes whether the omission constituted a breach of a legally applicable duty.

18. Ninth Useful Case — STS 371/2012

The Supreme Court held that, where a company is in a statutory dissolution situation, failure by a board to call the necessary meeting can be attributable to all board members unless an individual director demonstrates that they took all available steps to cause the board to act.

ESG significance

This case is particularly useful for understanding collective board responsibility.

A director should therefore:

• ask questions;
• demand risk reports;
• request ESG information;
• challenge inadequate controls;
• record objections;
• vote appropriately;
• ensure serious issues reach the board.

Silence can sometimes become legally significant.

19. ESG Executive Liability Matrix

20. When Does ESG Failure Become Personal Executive Liability?

A useful legal test is:

Step 1 — Was there an applicable legal or regulatory duty?

For example:

• banking regulation;
• company law;
• securities law;
• disclosure requirements;
• ESG risk-management requirements;
• consumer protection;
• criminal law.

Step 2 — Was the executive responsible?

Was the person:

• director;
• executive director;
• CEO;
• board member;
• senior manager;
• de facto administrator?

Step 3 — Was there fault?

Potential forms include:

• intentional misconduct;
• recklessness;
• negligence;
• conscious disregard of warnings.

Step 4 — Was there damage or regulatory infringement?

Examples:

• investor loss;
• bank loss;
• customer loss;
• regulatory breach;
• misleading disclosure.

Step 5 — Is there causation?

There must generally be a legally sufficient connection between:

executive conduct → ESG failure → legally recognised harm.

21. ESG Does Not Create Strict Liability

This is an extremely important examination point.

A director does not automatically become liable because:

“The bank's ESG score decreased.”

Nor because:

“The bank financed a company that later caused environmental damage.”

Nor because:

“The bank failed to achieve its net-zero target.”

Personal liability requires a legally relevant basis.

The difference is:

Business failure

Usually protected by the principle of business judgment and ordinary managerial discretion.

Legal/governance failure

Potentially actionable.

For example:

Bad prediction:
The board reasonably assessed transition risk but the prediction proved wrong.

Potential liability:
The board knew that its ESG disclosures were false but approved them anyway.

22. Business Judgment and ESG Decisions

Directors need room to make commercial decisions.

Courts should not retrospectively treat every unsuccessful ESG decision as negligence.

For example, suppose a bank invests €500 million in renewable-energy projects and the projects later become unprofitable.

That alone does not establish director liability.

But if the board:

• ignored internal risk reports;
• concealed known risks;
• manipulated financial projections;
• failed to obtain required information;
• had undisclosed conflicts;

the position becomes much more serious.

23. ESG and Risk Management

The modern Spanish banking model increasingly treats ESG as part of risk management.

The EBA's 2025 ESG Guidelines require institutions to establish arrangements for identification, measurement, management and monitoring of ESG risks.

Banco de España has similarly emphasised that climate risks need to be integrated into banks':

• business models;
• strategy;
• governance;
• risk management;
• disclosure. 

Therefore, a future executive-liability case may look less like:

“The director violated an environmental rule.”

and more like:

“The director failed to manage a material financial risk that happened to arise from climate or ESG factors.”

That is a much more important development.

24. ESG Scenario Analysis

The regulatory direction is also moving toward forward-looking analysis.

The EBA's ESG scenario-analysis guidelines are designed to test the resilience of institutions and business models against negative ESG impacts. They are scheduled to become applicable from 1 January 2027.

This matters for executive accountability because boards increasingly need to ask:

• What happens if carbon prices increase?
• What happens if fossil-fuel assets become stranded?
• What happens if extreme weather increases loan defaults?
• What happens if borrowers cannot meet transition requirements?
• What happens to collateral values?
• What happens to capital ratios?

A board that systematically ignores such risks may face increasingly difficult governance questions.

25. Social ESG Liability

The S in ESG is also important in banking.

Potential issues include:

• discriminatory lending;
• irresponsible lending;
• financial exclusion;
• employee discrimination;
• labour-rights failures;
• customer vulnerability;
• abusive sales practices;
• human-rights risks in financed activities.

A bank's executives may potentially face liability where social risks are transformed into violations of specific legal duties.

For example:

Algorithmic lending discriminates against a protected group → management knows of the problem → management fails to correct it.

The ESG label itself does not create liability, but the underlying discrimination or regulatory breach can.

26. Governance Is the Strongest Link to Executive Liability

Among the three ESG categories, G — governance — is presently the clearest route to executive liability.

Why?

Because governance directly concerns:

• board duties;
• internal controls;
• risk management;
• remuneration;
• disclosure;
• conflicts;
• compliance;
• oversight.

The Banco Popular remuneration case and Caja Madrid/Bankia black-card litigation demonstrate how governance failures can translate into concrete executive consequences.

27. Greenwashing and the Board

A particularly important hypothetical Spanish banking case would be:

Facts

A bank markets a €2 billion portfolio as sustainable.

The board receives internal reports showing that:

• 30% of the portfolio does not satisfy the bank's own sustainability criteria;
• emissions data are incomplete;
• executives nevertheless approve the marketing material.

Possible legal questions

1. Did directors breach their duty of diligence?
2. Was the disclosure misleading?
3. Did management breach banking requirements?
4. Were customers/investors harmed?
5. Did executives personally approve the information?
6. Was there intentional or negligent conduct?
7. Were warnings ignored?
8. Did the board adequately supervise ESG risk?

This is precisely where traditional Spanish director-liability doctrine can interact with modern ESG regulation.

28. Executive Defence

An executive accused of ESG-related misconduct may argue:

• they did not participate in the decision;
• they lacked relevant information;
• they relied reasonably on qualified experts;
• they requested further investigation;
• they opposed the decision;
• they demanded corrective measures;
• the information was not legally required;
• the loss resulted from an independent event;
• there was no causation;
• the conduct was a legitimate business decision.

Article 237's statutory framework makes evidence of non-participation or express opposition particularly important.

29. Importance of Board Minutes

For ESG governance, board minutes may become extremely important.

A director should ensure that the record demonstrates:

“The board considered the climate risk.”

“The board received the relevant ESG report.”

“The board requested additional information.”

“The director raised concerns.”

“The director voted against the proposal.”

“Management was instructed to implement corrective measures.”

This evidence can be critical if litigation subsequently arises.

30. Administrative, Civil and Criminal Liability

ESG-linked executive liability in Spain can potentially operate on three levels.

A. Administrative liability

Examples:

• regulatory breaches;
• inaccurate disclosures;
• market-information violations;
• banking supervisory breaches.

B. Civil liability

Possible claims for:

• damage to the company;
• damage to shareholders;
• damage to creditors;
• direct third-party losses.

C. Criminal liability

The threshold is much higher.

Potentially relevant offences can include:

• false accounting;
• fraud;
• misappropriation;
• market-related offences;
• other corporate crimes.

The Pescanova and Bankia cases demonstrate how severe executive misconduct can produce criminal consequences.

31. Six Core Case-Law Lessons

32. Overall Legal Position

The Spanish position can be summarised as follows:

ESG itself is not a standalone source of automatic personal liability for bank executives.

Instead, ESG risks increasingly become incorporated into existing legal obligations concerning:

Board duty + banking risk management + disclosure + internal controls + prudential supervision + investor/customer protection.

Therefore:

The more ESG risks become legally recognised financial risks, the stronger the connection between ESG governance and executive liability.

This is particularly important from 2026 onward, because the EBA's ESG-risk-management framework is now applicable, while additional ESG scenario-analysis requirements are moving toward application in 2027.

Conclusion

In Spain, an executive will generally not be personally liable merely because a bank's ESG performance is poor. Liability becomes much more plausible where the executive:

1. knowingly provides false ESG information;
2. conceals material climate or social risks;
3. fails to establish legally required risk controls;
4. manipulates ESG-linked remuneration metrics;
5. ignores serious ESG warnings;
6. breaches director duties;
7. causes identifiable financial or third-party damage;
8. commits a regulatory or criminal offence.

The emerging Spanish approach is therefore moving from “ESG as voluntary sustainability” toward “ESG as part of prudent banking governance and risk management.” Banco de España's supervisory approach and the EBA's 2025 ESG Guidelines strongly reinforce this development.

Exam-ready proposition:

In Spanish banking law, ESG-linked executive liability does not arise merely from failure to achieve sustainability objectives; rather, it arises where ESG-related risks or disclosures fall within the directors' legal duties and the executive's intentional or negligent breach of those duties causes a legally recognised regulatory, corporate, financial or third-party harm.