Governance of Uncertainty in Banking Law - Spain

This is not a normal governance topic. It is the central topic of Spanish banking law after 2008.

Spain learned uncertainty governance the hard way: In 2008-2012, Spanish banks looked solvent on paper, then collapsed in 6 months - Bankia, Banco Popular, Cajas. The problem was not fraud. The problem was governance of uncertainty - boards did not know how to govern what they could not predict.

Governance of Uncertainty = How a bank board governs risks it cannot measure precisely, cannot predict, but must survive.

In Spain, this is governed by 3 layers: EU Banking Union + Spanish Law 10/2014 + Banco de España Supervision.

1. What is "Uncertainty" in Banking Law?

Different from Risk. Risk can be calculated (Probability x Loss). Uncertainty cannot.

Spanish law distinguishes 5 uncertainties:

1. Credit Uncertainty: Will borrowers repay in recession? Spanish real estate bubble 2008 - nobody knew true value of mortgages.
2. Liquidity Uncertainty: Will depositors run? Banco Popular 2017 - depositors withdrew €6 billion in 2 days.
3. Legal / Regulatory Uncertainty: Will courts declare your mortgage clause abusive retroactively? Floor clauses cost Spanish banks €4-5 billion.
4. Operational / Climate / Cyber Uncertainty: Will cloud fail? Will climate transition destroy loan book?
5. Systemic Uncertainty: Will one bank failure contagion to others?

Governance must handle all 5, even when models fail.

2. Legal Framework - Spain

A. EU Banking Union - Spain is not sovereign in banking supervision anymore

Since 2014, Spain is part of Single Supervisory Mechanism (SSM):

• Significant Institutions (Santander, BBVA, CaixaBank, Sabadell, Bankinter, Unicaja) - Supervised directly by ECB, not Banco de España.
• Less Significant Institutions - Supervised by Banco de España, indirectly by ECB.

B. Spanish National Law

1. Law 10/2014 of 26 June - Organisation, Supervision and Solvency of Credit Institutions
Developed by Royal Decree 84/2015 and Banco de España Circular 2/2016.

• Implements CRD IV / CRR (Basel III) in Spain
• Requires Board to approve Risk Appetite, ICAAP, ILAAP, Recovery Plan
• Requires at least 1/3 Independent Directors, Risk Committee, Audit Committee, Nomination & Remuneration Committee

2. Law 11/2015 - Recovery and Resolution of Credit Institutions
Implements BRRD in Spain. Creates FROB - Fondo de Reestructuración Ordenada Bancaria - Spanish resolution authority. If bank is Failing or Likely to Fail (FOLTF), FROB + SRB can resolve it overnight, bail-in shareholders.

3. Royal Decree-Law 19/2018 - etc.
Macroprudential tools: Countercyclical Capital Buffer (CCyB), Systemic Risk Buffer, Borrower-based measures (LTV limits).

3. How Spain Governs Uncertainty - 6 Mechanisms

1. Macroprudential Policy - Banco de España
Banco de España monitors systemic risk, sets buffers. It says: "Given uncertainty of current context, institutions must maintain prudence."
Tools: CCyB (currently 1% in Spain, raised due to uncertainty), Systemic Risk Buffer for large banks, Limits on real estate exposure.

2. Stress Tests - Forward Looking Exercise on Spanish Banks (FLESB)

• EBA EU-wide stress test every 2 years - Tests largest EU banks under adverse scenario (GDP -5%, house prices -30%, etc.)
• Banco de España annual FLESB - Top-down test for all Spanish banks, including climate risk, liquidity risk.
• Purpose: Not to predict, but to prove bank can survive even if prediction is wrong. Results sent to ECB, published.

3. ICAAP / ILAAP - Internal Capital & Liquidity Adequacy
Every Spanish bank board must annually certify:

• ICAAP: Do we have enough capital for risks we cannot model?
• ILAAP: Do we have enough liquidity if depositors run for 30 days?
  Board cannot delegate this to Risk Dept. Board signs it.

4. Recovery Plan + Resolution Plan (Living Will)
Board must prepare Recovery Plan: What will we do if we lose 30% capital? Sell assets, raise capital, stop dividends.
SRB / FROB prepares Resolution Plan: How to resolve bank without taxpayer money if it fails.

5. Risk Appetite Framework (RAF) + Risk Committee
Board must set explicit limits: "We will not lend more than X% to real estate, we will not have liquidity coverage below 120%." If uncertainty rises, board must lower appetite.

6. Governance of Models - The "Model Risk" Rule
Spanish banks use internal models to calculate capital. After 2008, Banco de España found models were optimistic. Now, ECB must approve models, board must understand model limitations. If model says risk is low, board must still ask "What if model is wrong?"

4. Landmark Case Laws - Spain - Where Uncertainty Governance Failed

CASE 1: Floor Clauses - Cláusulas Suelo - STS 241/2013 + CJEU Joined Cases C-154/15, C-307/15, C-308/15 (2016) - €4 Billion Legal Uncertainty

Facts: Spanish banks (BBVA, Cajamar, Caixa Galicia) inserted "floor clauses" in mortgages - interest rate could not fall below 3-4% even if Euribor fell to 0%. 4 million mortgages affected. Consumers did not understand.

Spanish Supreme Court 9 May 2013 (STS 241/2013): Floor clauses are null for lack of transparency, but without retroactive effect - banks only repay from May 2013 onwards, to protect financial stability / avoid systemic uncertainty.

CJEU 21 Dec 2016 (Gutiérrez Naranjo): Spanish Supreme Court's temporal limitation is contrary to EU law. Article 6(1) Directive 93/13 - unfair term must be treated as never existed. Banks must repay all amounts from start.

Later: CJEU C-452/18 (2020), C-450/22 (4 July 2024) - Even if consumer signed waiver / novation to remove floor clause, it is abusive if not transparent.

Governance Lesson: This is the classic legal uncertainty case. Banks thought they governed legal risk by limiting retroactivity. CJEU said legal certainty for consumers > financial stability for banks. Boards now must assume any opaque clause will be declared void with full retroactivity. Cost to Spanish banks: ~€4-5 billion, plus provisions.

CASE 2: Banco Popular Resolution - 7 June 2017 - The Overnight Death

Facts: Banco Popular, 6th largest Spanish bank, suffered depositor run on 2-5 June 2017. On 6 June, it told ECB it was Likely to Fail. Same evening, Single Resolution Board (SRB) adopted resolution scheme, sold Popular to Santander for €1. Shareholders and AT1/ Tier 2 holders were wiped out (bail-in).

Litigation - Almost 100 cases:

• General Court 1 June 2022 - Cases T-481/17, T-510/17, T-523/17, T-570/17, T-628/17: Dismissed annulment actions in entirety. Court held SRB acted lawfully, valuation by Deloitte was provisional but sufficient given urgency.
• CJEU C-410/20: Shareholders asked for compensation under "No Creditor Worse Off" (NCWO) principle. Court held no compensation if they would have got zero in liquidation.
• CJEU C-551/22 P (18 June 2024) Commission v SRB: Clarified SRB's valuation duties.

Governance Lesson: This is the ultimate uncertainty governance test. Popular's Board failed to govern liquidity uncertainty - it had no credible recovery plan, it hid NPA. Resolution law says: If you cannot govern uncertainty, you will be resolved overnight and shareholders get zero. No bail-out, only bail-in.

CASE 3: Bankia IPO - STS 2015 / Audiencia Nacional 2017 - Misleading Prospectus

Facts: Bankia (formed from 7 Cajas) IPO in 2011 claimed profit of €309M. 9 months later, it needed €19B bailout, shares collapsed. Small investors lost savings.

Audiencia Nacional / Supreme Court: Directors (including Rodrigo Rato, ex- IMF chief) were initially acquitted of criminal fraud, but civil liability held - Bankia had to refund IPO investors. Prospectus was misleading because it did not disclose uncertainty about real estate loan losses.

Governance Lesson: Board cannot present uncertainty as certainty. If you don't know true value of loan book, you must disclose uncertainty, not hide it. This led to stricter prospectus governance under Law 6/2023 LMV.

CASE 4: IRPH - Índice de Referencia de Préstamos Hipotecarios - CJEU C-125/18 (2020) + Spanish Supreme Court

Facts: Spanish mortgages indexed to IRPH (official index set by Banco de España) instead of Euribor. IRPH was higher and less transparent. Consumers claimed it was abusive.

CJEU 3 March 2020: IRPH is not automatically transparent just because it's official. Courts must check if consumer understood how IRPH is calculated and could compare.

Spanish Supreme Court later: IRPH is not abusive per se if transparency test passed, but bank must prove it explained it.

Governance Lesson: Even using a regulatory index does not remove governance duty to explain uncertainty to customer.

CASE 5: Revolving Credit - STS 149/2015 (15 Dec 2015) - Wizink Case

Facts: Revolving credit cards with 24% interest, minimum payment, debt never ends.

Supreme Court: Declared revolving credit usurious if interest is "notably higher than normal money" and disproportionate. Banks must govern product design uncertainty - cannot sell product that traps consumer in perpetual debt.

This led to Banco de España Circular on revolving credit transparency and caps.

CASE 6: Banco de España v. Banco Madrid / BES - Money Laundering Uncertainty

Spanish courts held that bank board is liable if it fails to govern AML uncertainty - if it cannot explain source of funds, it must freeze, not process.

5. New Frontiers of Uncertainty - 2025-2026

1. Climate Uncertainty: Banco de España 2022 Climate Stress Test found Spanish banks have €300B exposure to climate-sensitive sectors. Boards must now include climate in ICAAP.

2. Digital Euro Uncertainty: ECB / Banco de España preparing Digital Euro. If launched, depositors may move to CBDC, causing bank runs. Boards must plan for this liquidity uncertainty.

3. AI Uncertainty: Under EU AI Act + DORA, Spanish banks using AI for credit scoring must govern model uncertainty - bias, explainability, human override.

4. Geopolitical Uncertainty: Ukraine war, tariff wars - Banco de España raised CCyB to 1% in 2024-25 precisely because of uncertainty.

Summary - The Spanish Doctrine

Old Governance (Pre-2008): Board governs what it knows.
New Governance (Post-2012, Law 10/2014 + BRRD): Board governs what it does NOT know.

Spanish law now requires boards to:

1. Assume worst case - Stress test, not base case
2. Hold buffers - Capital + Liquidity for uncertainty, not just risk
3. Disclose uncertainty - Floor clauses, IRPH, Bankia - hiding uncertainty = liability
4. Plan for failure - Recovery + Resolution plan - if you cannot survive, you will be sold for €1 like Popular
5. Protect consumer - Even in uncertainty, consumer protection overrides bank stability (CJEU Floor Clauses)