Banking Law and Ultimate Research Horizons in Spain

1. Introduction

The ultimate research horizons of Spanish banking law concern the areas in which traditional banking regulation is being transformed by technology, European Union law, financial instability, sustainability requirements, consumer protection and new forms of financial intermediation.

Spain's banking system must be studied through several overlapping layers:

1. Spanish banking legislation
2. Banco de España supervision
3. CNMV regulation for investment services and securities
4. FROB and resolution rules
5. European Central Bank (ECB) banking supervision
6. European Banking Authority (EBA) standards
7. European Union financial-services legislation
8. Spanish Civil and Commercial law
9. Consumer-protection law
10. AML/CFT and sanctions regulation

Consequently, the future of Spanish banking law is no longer limited to traditional questions such as deposit-taking and lending. Research increasingly concerns digital banks, artificial intelligence, crypto-assets, operational resilience, climate risk, algorithmic lending, payment systems, open banking, bank resolution and the interaction between technology and fundamental rights.

2. What Does “Research Horizons” Mean?

For banking-law research, a research horizon is an area where existing legal principles are being tested by a new financial or technological development.

The key research question becomes:

Can traditional banking-law concepts adequately regulate new forms of financial activity?

For Spain, this produces several major research fields.

3. Horizon One — Artificial Intelligence in Banking

Artificial intelligence is likely to become one of the most important areas of Spanish banking-law research.

Banks increasingly use algorithms for:

• credit scoring;
• fraud detection;
• anti-money-laundering monitoring;
• customer segmentation;
• investment advice;
• cybersecurity;
• collections;
• risk management; and
• automated decision-making.

The legal questions include:

Transparency

Can a customer understand why an algorithm rejected a loan?

Discrimination

Could an algorithm indirectly discriminate against:

• women;
• particular nationalities;
• particular geographical groups;
• economically vulnerable consumers; or
• other protected groups?

Accountability

Who is legally responsible if the algorithm makes a serious error?

Human oversight

When should a human employee be required to review an automated decision?

4. EU AI Act and Spanish Banking Research

The EU Artificial Intelligence Act is particularly important because financial institutions may deploy AI systems in areas involving significant consequences for individuals.

Banking researchers should examine the interaction between:

• AI regulation;
• GDPR;
• consumer credit law;
• financial-services regulation;
• discrimination law; and
• banking supervision.

Research question

Can a bank simultaneously satisfy AI transparency, data-protection, consumer-credit and prudential requirements when using automated credit decisions?

This is a major emerging field.

5. Case Law — SCHUFA and Automated Credit Decisions

SCHUFA Holding (C-634/21)

The Court of Justice of the European Union examined automated scoring and Article 22 GDPR.

The case is extremely important for financial-sector research because credit scoring can directly influence whether a consumer obtains financial services.

Importance for Spain

Spanish banks using automated scoring systems must consider:

• lawful processing;
• meaningful information;
• automated decision-making;
• human intervention;
• data quality;
• fairness; and
• explainability.

The case demonstrates that algorithmic credit assessment is not simply a technological issue—it is a legal and fundamental-rights issue.

6. Horizon Two — Digital Banking

Spanish banking is increasingly digital.

Research areas include:

• online account opening;
• remote identification;
• digital signatures;
• biometric authentication;
• mobile banking;
• digital payments;
• instant payments;
• open banking; and
• branchless banking.

The fundamental legal question is:

How should traditional banking duties be adapted when the customer never meets a bank employee?

7. Digital Identity

Digital onboarding creates new legal issues concerning:

• identity verification;
• biometric data;
• electronic identification;
• fraud;
• deepfakes;
• account takeover;
• synthetic identities; and
• AML compliance.

Banks must balance:

security

against

privacy

and

financial inclusion.

This will become an increasingly important area of Spanish banking-law scholarship.

8. Horizon Three — Consumer Protection

Consumer banking remains one of the richest areas of Spanish banking litigation.

Important issues include:

• mortgage transparency;
• unfair terms;
• interest-rate clauses;
• commissions;
• early repayment;
• foreign-currency mortgages;
• revolving credit;
• consumer credit;
• digital contracting; and
• financial-information duties.

Spanish banking law has been profoundly influenced by CJEU consumer-protection jurisprudence.

9. Case Law — Banco Español de Crédito v Calderón Camino

CJEU Case C-618/10

The Court examined unfair terms in consumer contracts.

The judgment reinforced the importance of effective judicial protection against unfair contractual terms.

Banking significance

Banks cannot rely simply on the existence of a signed contract.

A court may have to examine whether a contractual term is unfair under EU consumer law.

Research horizon

The case raises an important modern question:

How should consumer-protection principles apply to digitally accepted banking terms containing thousands of pages of standardised contractual conditions?

10. Case Law — Aziz v Caixa d'Estalvis de Catalunya

CJEU Case C-415/11

This is one of the most important European cases concerning Spanish mortgage enforcement.

The Court considered whether Spanish procedural rules provided effective protection against unfair mortgage terms.

Importance

The case contributed to major developments in Spanish mortgage law and consumer protection.

Research significance

It demonstrates that:

procedural banking law can be just as important as substantive banking law.

A banking contract may contain an apparently valid clause, but enforcement mechanisms must still respect EU consumer rights.

11. Case Law — BBVA

CJEU Case C-8/14

The Court considered Spanish transitional procedural arrangements following Aziz.

The case illustrates the continuing interaction between:

• EU consumer law;
• Spanish procedural law;
• mortgage enforcement; and
• access to effective remedies.

This remains an important research field because banking regulation increasingly depends on both substantive and procedural consumer protection.

12. Case Law — Gutiérrez Naranjo

Joined Cases C-154/15, C-307/15 and C-308/15

The CJEU addressed the consequences of unfair mortgage floor clauses.

The Court held that limitations on restitution could not be maintained in the manner previously applied by the Spanish courts.

Research significance

This jurisprudence illustrates the enormous economic consequences that judicial interpretation of banking contracts can create.

It is a major example of:

consumer law → banking contracts → judicial remedies → systemic financial consequences.

13. Horizon Four — Crypto-Assets and Banking

Crypto-assets create a major new boundary problem.

The central question is:

When does a crypto-asset activity become banking or financial intermediation?

Relevant areas include:

• custody;
• stablecoins;
• tokenised deposits;
• crypto payments;
• tokenised securities;
• crypto lending;
• decentralised finance;
• market manipulation; and
• AML compliance.

Spain must be analysed alongside the EU's Markets in Crypto-Assets (MiCA) framework.

14. Bank-Crypto Interface

A bank may interact with crypto-assets without itself becoming a crypto-asset issuer.

For example, it may provide:

• custody;
• payment services;
• account services;
• compliance services;
• tokenised securities infrastructure; or
• financing.

This raises an important regulatory question:

Where should the boundary between traditional banking regulation and crypto-asset regulation be drawn?

15. Horizon Five — Central Bank Digital Currency

The development of the digital euro creates another major research field.

Spanish banking researchers will need to examine:

• legal status of digital money;
• privacy;
• offline payments;
• bank intermediation;
• holding limits;
• monetary sovereignty;
• AML;
• cybersecurity;
• financial stability; and
• bank deposit substitution.

The major question is:

Could widespread use of central-bank digital money alter the traditional relationship between commercial banks and depositors?

16. Horizon Six — Open Banking

Open banking changes the traditional assumption that customer financial data is controlled exclusively by the customer's bank.

Research issues include:

• data portability;
• account-information services;
• payment-initiation services;
• API security;
• customer consent;
• third-party access;
• liability for unauthorised transactions; and
• competition.

The future Spanish framework must be analysed alongside developments under PSD2 and the emerging EU payments framework.

17. Horizon Seven — Operational Resilience

One of the most important modern areas is digital operational resilience.

The EU's Digital Operational Resilience Act (DORA) substantially changes the legal treatment of ICT risk in financial institutions.

Spanish banks must consider:

• cyber risk;
• ICT incidents;
• third-party technology providers;
• cloud outsourcing;
• incident reporting;
• resilience testing;
• ICT governance; and
• concentration risk.

18. Cloud Computing and Banking Law

A major research question is:

Can a bank outsource critical banking infrastructure without outsourcing legal responsibility?

The answer is generally no.

Even where technology is provided by:

• cloud companies;
• software providers;
• fintech firms; or
• external service providers,

the regulated bank remains subject to regulatory obligations.

This creates a major research field concerning outsourcing versus regulatory accountability.

19. Horizon Eight — Bank Cybersecurity

Cybersecurity is no longer merely an IT issue.

A major cyber incident can affect:

• payment systems;
• customer deposits;
• financial stability;
• confidentiality;
• operational continuity; and
• confidence in the banking system.

Spanish banking research therefore increasingly examines:

cybersecurity + prudential supervision + data protection + consumer protection.

20. Horizon Nine — Climate and Transition Risk

Spanish banking law is also moving toward climate-related financial risk.

Banks must increasingly consider:

• physical climate risk;
• transition risk;
• carbon-intensive borrowers;
• climate stress testing;
• sustainable finance;
• greenwashing;
• ESG disclosures; and
• environmental risk in credit decisions.

The fundamental research question is:

When does climate risk become legally relevant credit risk?

21. Greenwashing and Banking

Banks increasingly market:

• green loans;
• sustainable investments;
• transition finance;
• ESG funds; and
• sustainability-linked products.

This creates potential legal liability where marketing claims do not correspond to the actual characteristics of the financial product.

Research should therefore examine:

banking regulation + consumer law + securities regulation + ESG disclosure + civil liability.

22. Horizon Ten — Banking Resolution

Another major research horizon is bank failure.

Spain operates within the EU Bank Recovery and Resolution Directive (BRRD) and Single Resolution Mechanism (SRM) framework.

Relevant institutions include:

• Banco de España;
• FROB;
• European Central Bank;
• Single Resolution Board; and
• other European supervisory authorities.

Key research questions include:

• bail-in;
• depositor protection;
• MREL;
• resolution planning;
• bank liquidation;
• shareholder losses;
• creditor hierarchy; and
• judicial review of resolution decisions.

23. Horizon Eleven — Depositor Protection

Deposit protection creates another important research field.

The Spanish Deposit Guarantee Fund (FGD) provides protection within the applicable EU deposit-guarantee framework.

Research questions include:

• which deposits qualify;
• temporary high balances;
• trust-like arrangements;
• joint accounts;
• cross-border deposits;
• payout mechanisms; and
• interaction with bank resolution.

This connects directly with research into trust-like and fiduciary accounts.

24. Horizon Twelve — Algorithmic Lending

Algorithmic lending is likely to become one of the most important areas of Spanish banking law.

Suppose an algorithm determines:

“Customer A receives credit; Customer B does not.”

The legal questions include:

• What data was used?
• Was the data accurate?
• Was the decision discriminatory?
• Can the consumer challenge the decision?
• Was human review available?
• Was the explanation adequate?
• Was the model properly governed?

This combines:

consumer credit + GDPR + AI law + banking supervision.

25. Horizon Thirteen — Financial Inclusion

Digitalisation can increase efficiency but may also exclude people.

Potentially vulnerable groups include:

• elderly customers;
• persons with disabilities;
• people without digital skills;
• migrants;
• economically vulnerable customers; and
• customers without reliable digital access.

Research should examine whether:

digital-only banking can satisfy the legal requirement of fair access to essential financial services.

26. Horizon Fourteen — Competition and Big Tech

Traditional banks increasingly compete with:

• fintechs;
• technology companies;
• payment platforms;
• digital wallets;
• marketplaces; and
• embedded-finance providers.

This raises competition-law questions.

For example:

Can a technology platform use its control over customer data to disadvantage competing banks?

Research therefore increasingly connects:

banking law + competition law + data law.

27. Horizon Fifteen — Embedded Finance

Embedded finance means financial services are incorporated into non-financial platforms.

Examples include:

• payment services inside marketplaces;
• loans inside e-commerce platforms;
• insurance inside digital applications;
• banking products inside business software.

The legal question is:

Who is actually providing the financial service?

Possible participants include:

• bank;
• fintech;
• platform;
• payment institution;
• technology provider.

This creates significant questions regarding licensing and responsibility.

28. Horizon Sixteen — Stablecoins and Deposit Substitution

Stablecoins create an especially interesting banking-law problem.

If consumers begin holding large quantities of stablecoins rather than bank deposits:

Does this create a new form of private money competing with commercial-bank deposits?

Research areas include:

• monetary stability;
• redemption rights;
• reserve assets;
• insolvency;
• consumer protection;
• AML;
• systemic risk.

29. Horizon Seventeen — Tokenisation of Bank Assets

Tokenisation could allow banks to represent:

• deposits;
• securities;
• loans;
• collateral;
• fund interests; and
• other assets

through distributed-ledger technology.

The legal questions include:

• Who owns the token?
• Is the token the asset itself or merely a representation?
• What happens on insolvency?
• Can it be pledged?
• How is transfer perfected?
• Which register controls?

This is likely to become a major research field in Spanish banking and securities law.

30. Horizon Eighteen — Smart Contracts

Smart contracts may automatically execute financial obligations.

For example:

If condition X occurs, the system automatically transfers €100,000.

The legal research questions are:

• Is the code legally binding?
• What happens if the code contains an error?
• Can a court order reversal?
• Who is responsible for an oracle failure?
• How are consumer rights protected?

Spanish contract law will increasingly have to interact with automated execution.

31. Horizon Nineteen — Banking and Data Governance

Financial institutions possess enormous quantities of sensitive information.

Research should examine:

• data ownership;
• portability;
• profiling;
• automated processing;
• cybersecurity;
• commercial exploitation;
• consent; and
• financial privacy.

The future banking relationship may therefore be understood partly as a:

financial-data relationship

rather than merely a debtor-creditor relationship.

32. Horizon Twenty — Cross-Border Banking

Spanish banks operate extensively within the EU.

Cross-border research includes:

• passporting;
• ECB supervision;
• foreign branches;
• subsidiaries;
• cross-border lending;
• international payments;
• foreign collateral;
• insolvency;
• AML;
• sanctions; and
• recognition of judgments.

This is particularly important where a Spanish bank has customers or assets in multiple jurisdictions.

33. Horizon Twenty-One — Banking and Human Rights

An emerging research field concerns the relationship between financial services and fundamental rights.

Questions include:

• Can a bank terminate an account without adequate explanation?
• What procedural protections should customers receive?
• How should banks balance AML obligations with customer rights?
• Can automated systems indirectly discriminate?
• What rights exist when a customer is denied essential payment services?

The Spanish Constitution, EU Charter and European human-rights framework may therefore become increasingly relevant to banking disputes.

34. Horizon Twenty-Two — Banking Secrecy Versus Transparency

Traditional banking confidentiality increasingly conflicts with:

• AML reporting;
• tax-information exchange;
• beneficial-ownership registers;
• sanctions;
• regulatory reporting; and
• law-enforcement requests.

The research problem is:

Where should the legal boundary between financial privacy and regulatory transparency be placed?

35. Important Case-Law Research Map

36. Kásler v OTP Jelzálogbank — C-26/13

Although the case arose outside Spain, it is important for Spanish banking research.

The CJEU examined transparency in consumer contracts and the relationship between contractual terms and the consumer's ability to understand their economic consequences.

Spanish relevance

It strengthens the argument that:

formal readability is not necessarily sufficient transparency.

A banking customer may need to understand the economic consequences of a contractual clause.

37. Andriciuc — C-186/16

This case concerned foreign-currency loans and the information consumers should receive about currency risk.

Spanish significance

Spain has experienced extensive litigation concerning foreign-currency and index-linked financial products.

The case is useful for researching:

• risk disclosure;
• transparency;
• currency exposure;
• informed consent; and
• unfair terms.

38. Dziubak — C-260/18

This case examined the consequences of unfair terms in foreign-currency mortgage arrangements.

Research significance

It demonstrates the potentially radical consequence of finding that a banking contract contains an unfair term:

the legal consequences may extend beyond merely removing the individual clause.

This is important when studying the systemic impact of banking litigation.

39. Ultimate Research Direction

The most advanced research question is no longer:

“What rules govern Spanish banks?”

It is:

“How should banking law regulate financial institutions when banking increasingly operates through algorithms, cloud infrastructure, digital assets, automated contracts and cross-border platforms?”

That question produces several interconnected research streams.

Traditional banking

Deposit → lending → payment → securities

Digital banking

Apps → APIs → cloud → AI

New finance

Crypto → tokenisation → stablecoins → CBDC

New risks

Cybersecurity → algorithmic discrimination → operational resilience

New regulatory objectives

Consumer protection → financial stability → sustainability → data protection

40. Research Matrix for Spain

41. Conclusion

The ultimate research horizon of Spanish banking law is the transition from traditional institution-based regulation to technology-, data-, platform- and risk-based regulation.

The most important future research areas are:

1. AI and algorithmic credit
2. Digital banking and digital identity
3. Crypto-assets and MiCA
4. Digital euro and CBDC
5. Open banking and financial data
6. DORA and operational resilience
7. Cybersecurity
8. Climate and transition risk
9. Bank resolution and depositor protection
10. Tokenisation and smart contracts
11. Big Tech and competition
12. Financial inclusion
13. Cross-border banking
14. AML versus financial privacy
15. Consumer protection in automated financial services

The Spanish case-law trajectory—from Banco Español de Crédito, Aziz, BBVA and Gutiérrez Naranjo to newer jurisprudence concerning automated decision-making such as SCHUFA—shows a broader transformation: banking law is increasingly concerned not merely with whether a bank complied with a contract, but with transparency, fairness, data, technology, effective remedies and systemic consequences.

For advanced research, the most productive framework is therefore:

Spanish banking law + EU banking regulation + consumer law + data/AI law + fintech regulation + prudential supervision + competition law + insolvency/resolution law.