DUAL SUPERVISION OF BANKING AND INVESTMENT SERVICES IN SPAIN – MiFID OVERLAP: DETAILED LEGAL EXPLANATION WITH FOUR CASE LAWS

1. INTRODUCTION

Dual supervision of banking and investment services in Spain refers to the regulatory arrangement under which credit institutions providing both traditional banking services and investment services are subject to overlapping supervisory responsibilities.

The two principal Spanish authorities involved are:

Banco de España (Bank of Spain) – responsible for banking supervision within its statutory competence and the European supervisory framework.

Comisión Nacional del Mercado de Valores (CNMV) – responsible for securities-market supervision and oversight of investment services within its statutory competence.

At the European level, the European Central Bank (ECB) also exercises significant prudential supervisory responsibilities under the Single Supervisory Mechanism (SSM).

The Markets in Financial Instruments Directive II (MiFID II), Directive 2014/65/EU, establishes regulatory requirements for investment services, investor protection, conduct of business, and financial-market transparency.

When a Spanish bank provides investment advice, portfolio management, execution of securities transactions, or distribution of financial instruments, it must comply with applicable investment-services rules in addition to banking regulations.

This creates an important distinction between prudential supervision, which primarily concerns the financial stability and soundness of institutions, and conduct supervision, which concerns how financial services are provided to customers and investors.

The overlap can generate legal questions regarding supervisory jurisdiction, regulatory compliance, investor protection, enforcement, and institutional accountability.

2. MEANING OF DUAL SUPERVISION

Dual supervision means that a financial institution may be regulated by more than one authority because it conducts different categories of regulated activities.

A Spanish bank may simultaneously undertake:

Deposit-taking.

Lending and credit operations.

Payment services.

Investment advice.

Portfolio management.

Securities execution.

Distribution of investment products.

Custody and administration of financial instruments.

Traditional banking activities fall primarily within banking regulatory frameworks.

Investment services are subject to MiFID II and Spanish securities-market legislation.

However, the distinction is not absolute. Banking supervisors may examine governance and risk management relating to investment activities, while securities regulators may examine conduct, product governance, and investor protection.

Therefore, dual supervision does not necessarily mean that both authorities independently supervise every activity in the same way.

It means that different supervisory powers may apply to the same institution, sometimes in relation to connected risks.

3. SPANISH SUPERVISORY AUTHORITIES

3.1 Banco de España

Banco de España is Spain's national central bank and a banking supervisory authority.

Its responsibilities include functions concerning:

Banking supervision within the SSM framework.

Compliance with applicable prudential requirements.

Banking conduct and transparency within its legal competence.

Certain payment-services obligations.

Supervisory information and reporting.

Financial stability and institutional risk monitoring.

For significant credit institutions, the ECB exercises direct prudential supervision under the SSM.

Banco de España participates in the European supervisory structure and performs national supervisory functions assigned by law.

3.2 Comisión Nacional del Mercado de Valores

The CNMV is Spain's securities-market regulator.

Its responsibilities include:

Supervision of investment services.

Investor protection.

Monitoring compliance with MiFID II conduct requirements.

Supervision of securities-market activities.

Oversight of investment firms within its competence.

Market abuse supervision and enforcement.

Investment product distribution and disclosure requirements.

When a Spanish bank provides investment services, CNMV supervision may apply to those services even though the institution is also a regulated bank.

3.3 European Central Bank

Under the SSM, the ECB is responsible for specified prudential supervisory tasks concerning credit institutions in participating Member States.

Its responsibilities include:

Prudential supervision of significant banks.

Capital adequacy assessment.

Supervisory review and evaluation.

Certain governance and risk-management requirements.

Prudential supervisory measures.

The ECB does not generally replace the CNMV as the authority responsible for MiFID investment-services conduct supervision.

3.4 European Securities and Markets Authority

The European Securities and Markets Authority (ESMA) promotes consistent implementation of EU securities regulation.

Its functions include regulatory convergence, technical standards, guidelines, and certain direct supervisory responsibilities assigned under EU law.

ESMA does not ordinarily replace the CNMV in supervising routine MiFID conduct obligations of Spanish banks.

4. LEGAL FRAMEWORK IN SPAIN

4.1 MiFID II – Directive 2014/65/EU

MiFID II establishes requirements for firms providing investment services.

Important provisions include:

Article 16 – Organisational Requirements

Investment firms must maintain appropriate organisational and compliance arrangements.

Article 23 – Conflicts of Interest

Firms must identify and manage conflicts that could adversely affect clients.

Article 24 – General Principles and Information to Clients

Investment firms must act honestly, fairly, and professionally in accordance with clients' best interests.

Article 25 – Suitability and Appropriateness

Investment firms must comply with suitability and appropriateness requirements according to the investment service provided.

Article 27 – Best Execution

Firms executing orders must take the steps required by the directive to obtain the best possible result for clients.

These obligations may apply when a Spanish bank provides relevant investment services.

4.2 MiFIR – Regulation (EU) No 600/2014

MiFIR complements MiFID II through directly applicable rules concerning financial markets.

Its subject matter includes:

Trading transparency.

Transaction reporting.

Certain trading obligations.

Market structure.

Regulatory reporting requirements.

The applicable obligations depend on the institution's activities and the relevant financial instruments.

4.3 Spanish Securities Markets and Investment Services Law

Law 6/2023 of 17 March on Securities Markets and Investment Services (Ley de los Mercados de Valores y de los Servicios de Inversión) provides a principal statutory framework for Spanish securities markets and investment services.

It addresses matters including:

Investment services.

Financial instruments.

Supervisory powers.

Investor protection.

Market conduct.

Administrative infringements and sanctions.

It must be read alongside applicable EU legislation and implementing rules.

4.4 Royal Decree 813/2023

Royal Decree 813/2023 develops aspects of the Spanish framework concerning investment firms and other entities providing investment services.

It forms part of the implementing regulatory structure relevant to investment-services supervision.

4.5 Law 10/2014 on Credit Institutions

Law 10/2014 of 26 June concerns the organisation, supervision, and solvency of credit institutions.

It provides an important Spanish legal foundation for banking supervision and prudential regulation.

4.6 Regulation (EU) No 1024/2013

This regulation establishes the SSM and confers specific prudential supervisory tasks on the ECB.

It defines the European framework within which the ECB and national competent authorities exercise banking supervisory responsibilities.

4.7 Capital Requirements Regulation and Directive

The Capital Requirements Regulation and Capital Requirements Directive establish important EU prudential requirements for credit institutions.

These include rules concerning capital, governance, risk management, and supervisory review.

They operate alongside MiFID requirements where a credit institution also provides investment services.

5. AREAS OF OVERLAP BETWEEN BANKING AND INVESTMENT SUPERVISION

5.1 Governance and Internal Controls

Both prudential and investment-services regulations impose governance-related obligations.

A bank must maintain effective risk-management and internal-control arrangements.

MiFID II additionally requires arrangements appropriate to investment services, including compliance systems and conflict-of-interest controls.

The same internal governance failure may therefore have both prudential and conduct implications.

5.2 Conflicts of Interest

A bank may act as lender, product manufacturer, distributor, and investment adviser.

These multiple roles may create conflicts of interest.

For example, a bank could recommend a financial instrument issued by an entity to which it has significant credit exposure.

MiFID rules require appropriate conflict identification, prevention, or management, including disclosure where the applicable requirements call for it.

5.3 Distribution of Complex Financial Products

Banks may distribute:

Structured notes.

Derivatives.

Investment funds.

Complex debt instruments.

Certain hybrid financial products.

The institution's banking status does not eliminate its investment-services obligations.

The CNMV may examine whether the bank complied with suitability, appropriateness, disclosure, and product governance requirements.

5.4 Prudential Risk and Investor Protection

A bank may sell financial products that create both institutional risk and customer risk.

Prudential supervisors focus on institutional resilience and financial soundness.

Securities supervisors focus on market conduct and investor protection.

These responsibilities can intersect without becoming legally identical.

5.5 Reporting Obligations

Banks providing investment services may be subject to multiple reporting regimes.

These can include:

Prudential reporting.

Transaction reporting.

Financial statement reporting.

Conduct-related reporting.

Regulatory incident notifications.

The existence of multiple reporting duties does not mean that the same information must always be reported identically to every regulator.

6. FOUR IMPORTANT CASE LAWS

CASE LAW 1: Banco Español de Crédito SA v. Joaquín Calderón Camino

Citation: Case C-618/10, Court of Justice of the European Union, Judgment of 14 June 2012.

Facts:

The dispute concerned a consumer credit agreement and the treatment of an allegedly unfair contractual term relating to default interest.

The matter raised questions under Directive 93/13/EEC on unfair terms in consumer contracts.

Judgment:

The CJEU emphasized the need for effective judicial protection against unfair contractual terms.

The Court held that national procedural arrangements must not undermine the protection provided by the directive.

It also addressed the consequences of finding an unfair contractual term.

Relevance to Dual Supervision:

The judgment illustrates that financial institutions may be subject to substantive customer-protection rules and judicial scrutiny independently of their prudential regulatory status.

For Spanish banks offering investment products, compliance with banking supervision does not automatically establish compliance with investor-protection obligations.

However, this case concerns consumer contract law rather than a direct allocation of supervisory responsibilities between Banco de España and the CNMV.

Legal Principle:

Financial institutions remain subject to applicable customer-protection legislation and effective judicial review.

CASE LAW 2: Genil 48 SL and Comercial Hostelera de Grandes Vinos SL v. Bankinter SA and Banco Bilbao Vizcaya Argentaria SA

Citation: Case C-604/11, Court of Justice of the European Union, Judgment of 30 May 2013.

Facts:

The dispute concerned interest-rate swap agreements entered into between commercial customers and Spanish banks.

Questions arose concerning the application of investment-services legislation and the obligations of financial institutions when providing services involving financial instruments.

Judgment:

The CJEU interpreted provisions of MiFID I, Directive 2004/39/EC, concerning investment advice and suitability obligations.

The Court examined when a service constitutes investment advice and how relevant investment-services obligations apply.

It also addressed the relationship between MiFID requirements and other legal obligations associated with financial products.

Relevance to Dual Supervision:

This is particularly important because banks may provide derivatives connected with lending arrangements.

A derivative transaction may fall within the investment-services regulatory framework even when offered by a bank in connection with an existing financing relationship.

The case illustrates that a banking relationship does not automatically exclude securities-law obligations.

Legal Principle:

The regulatory treatment of a financial service depends on its legal characteristics and the applicable investment-services rules, not merely on the provider's status as a bank.

CASE LAW 3: Banif Plus Bank Zrt v. Csaba Csipai and Viktória Csipai

Citation: Case C-472/11, Court of Justice of the European Union, Judgment of 21 February 2013.

Facts:

The dispute concerned a consumer credit agreement and the judicial examination of unfair contractual terms.

Questions arose regarding the national court's obligations when assessing contractual unfairness.

Judgment:

The CJEU confirmed important requirements concerning effective consumer protection and the procedural treatment of unfair terms.

It emphasized that the parties must have an opportunity to address matters raised by the court.

Relevance to Dual Supervision:

The judgment demonstrates that regulatory compliance and contractual enforceability are distinct legal questions.

A financial institution may comply with aspects of banking supervision while still facing judicial challenges concerning contractual terms.

The case does not directly interpret MiFID II or Spanish supervisory jurisdiction, but it illustrates the broader legal environment affecting financial institutions offering multiple services.

Legal Principle:

Financial-service contracts remain subject to applicable judicial scrutiny and consumer-protection requirements.

CASE LAW 4: Banco Santander SA v. J.A.C. and M.C.P.R.

Citation: Case C-598/21, Court of Justice of the European Union, Judgment of 12 January 2023.

Facts:

The proceedings concerned Spanish mortgage enforcement and the interpretation of EU consumer-protection requirements.

The dispute raised questions about the treatment of unfair contractual terms in enforcement proceedings.

Judgment:

The CJEU examined the requirements of Directive 93/13/EEC and the effectiveness of consumer protection in the relevant procedural context.

Relevance to Dual Supervision:

The judgment illustrates that banks are subject to judicially enforceable customer-protection rules in addition to institutional supervision.

In the wider context of dual supervision, it reinforces the importance of distinguishing regulatory oversight from the enforceability of individual customer rights.

It is not a direct precedent concerning MiFID II supervision by the CNMV.

Legal Principle:

Banking institutions remain subject to EU consumer-protection requirements notwithstanding their regulated institutional status.

7. LEGAL CONSEQUENCES OF SUPERVISORY OVERLAP

7.1 Multiple Regulatory Investigations

A bank's conduct may raise questions within the competence of more than one authority.

For example, weaknesses in governance may attract prudential attention while investment-product mis-selling may lead to conduct supervision.

7.2 Administrative Sanctions

Breaches of investment-services rules may result in administrative sanctions under the applicable securities-law framework.

Breaches of prudential banking requirements may result in separate supervisory measures or sanctions.

The authority imposing a sanction must possess the relevant statutory competence.

7.3 Investor Compensation Claims

Customers may bring civil claims where they establish an actionable breach and the requirements for the relevant remedy.

Potential issues include:

Misrepresentation.

Defective consent.

Breach of contractual obligations.

Failure to provide legally required information.

Unsuitable investment recommendations.

Recoverable financial loss.

A regulatory infringement does not automatically establish every element of civil liability.

7.4 Reputational and Compliance Risks

Supervisory overlap can increase compliance complexity.

Banks may need coordinated internal systems addressing both prudential and conduct obligations.

7.5 Supervisory Cooperation

Cooperation between competent authorities is important to avoid regulatory gaps and inconsistent supervisory responses.

However, cooperation does not remove statutory limits on each authority's jurisdiction.

8. PRACTICAL EXAMPLE

ABC Bank, a hypothetical Spanish credit institution, provides a €10 million commercial loan to a corporate customer.

The bank also recommends an interest-rate derivative intended to manage the customer's exposure to variable interest rates.

The customer subsequently suffers losses under the derivative and alleges that the bank failed to explain its risks adequately.

Banking Supervision:

The ECB or Banco de España, according to the applicable allocation of competence, may examine prudential matters such as risk management, governance, and exposure controls.

Investment-Services Supervision:

The CNMV may examine whether the derivative-related service was subject to MiFID requirements and whether the bank complied with applicable conduct obligations.

Civil Litigation:

The customer may separately pursue contractual or other legally available remedies.

The court would consider the facts, the nature of the service, applicable duties, and the requirements for the claimed remedy.

The decision in Genil 48 is relevant to determining the application of investment-services obligations to derivatives provided by banks.

This example demonstrates that one commercial relationship can involve multiple regulatory and legal frameworks.

9. INDIAN LEGAL FRAMEWORK – COMPARATIVE PERSPECTIVE

India also separates important banking and securities-market regulatory functions.

9.1 Reserve Bank of India

The RBI regulates banks and performs statutory functions concerning banking supervision, prudential regulation, and financial stability.

9.2 Securities and Exchange Board of India

SEBI regulates securities markets and investment intermediaries within its statutory jurisdiction.

Where a bank participates in securities-market activities, applicable SEBI requirements may arise in addition to banking regulation.

9.3 Relevant Indian Legislation

The principal statutes include:

Reserve Bank of India Act, 1934.

Banking Regulation Act, 1949.

Securities and Exchange Board of India Act, 1992.

Securities Contracts (Regulation) Act, 1956.

Depositories Act, 1996.

Indian Contract Act, 1872.

The Spanish and Indian systems share the broad regulatory objective of protecting financial stability and market participants.

However, their supervisory structures, legal powers, and allocation of responsibilities differ.

MiFID II is an EU legislative framework and does not directly apply as Indian domestic law.

10. INTERNATIONAL REGULATORY FRAMEWORK

10.1 MiFID II

MiFID II provides the central EU investment-services framework.

It regulates conduct obligations, organisational arrangements, investment advice, suitability, appropriateness, and related matters.

10.2 MiFIR

MiFIR establishes directly applicable rules for important aspects of securities-market operation and transparency.

10.3 European Banking Authority

The European Banking Authority promotes regulatory convergence and develops technical standards and guidance concerning banking regulation.

10.4 European Securities and Markets Authority

ESMA promotes consistent securities-market regulation and investor protection across the EU.

10.5 Basel Committee on Banking Supervision

Basel standards address prudential matters including capital adequacy and risk management.

They do not replace MiFID conduct requirements.

10.6 International Organization of Securities Commissions

IOSCO develops international principles and standards relating to securities regulation, market integrity, and investor protection.

Its standards provide international regulatory guidance but do not independently replace applicable EU or Spanish legislation.

11. RECOMMENDATIONS FOR EFFECTIVE DUAL SUPERVISION

Spanish banks providing investment services should establish coordinated compliance systems addressing the different regulatory requirements.

Important measures include:

A. Clear Regulatory Responsibility

Identify the authority responsible for each regulated activity and obligation.

B. Integrated Compliance Governance

Maintain appropriate coordination between banking compliance and investment-services compliance functions.

C. Conflict-of-Interest Controls

Identify and manage conflicts arising from lending, investment advice, underwriting, and product distribution.

D. Investor Protection Procedures

Implement suitable processes for client classification, disclosure, suitability, appropriateness, and complaint handling.

E. Regulatory Reporting Controls

Ensure accurate and timely reporting under the relevant banking and securities regimes.

F. Internal Audit and Risk Management

Review prudential and investment-services compliance risks through appropriate governance arrangements.

G. Supervisory Cooperation

Support lawful information sharing and cooperation with competent authorities.

H. Documentation

Maintain records demonstrating compliance with the applicable investment-services and banking obligations.

12. CONCLUSION

Dual supervision of banking and investment services in Spain reflects the need to regulate financial institutions according to the different risks created by their activities.

Banco de España and the ECB exercise important banking supervisory responsibilities, while the CNMV supervises securities-market activities and investment-services conduct within its statutory competence.

MiFID II is particularly important when banks provide investment advice, portfolio management, derivatives, securities execution, or other regulated investment services.

The overlap does not mean that every regulator has identical authority over the same activity.

Instead, it creates a system in which prudential regulation, market conduct supervision, investor protection, and judicial enforcement operate through different but interconnected legal mechanisms.

The four cases discussed illustrate important principles concerning investment-services obligations and financial customer protection.

Among them, Genil 48 SL v. Bankinter SA and BBVA SA is especially relevant because it directly concerns the application of MiFID investment-services requirements to financial instruments provided by Spanish banks.

The central legal principle is that a bank's authorization and supervision as a credit institution do not exempt it from applicable MiFID investment-services obligations.

Effective dual supervision requires clear statutory allocation of responsibilities, regulatory cooperation, strong internal governance, and enforceable investor-protection standards.

13. REFERENCES

A. Spanish Legislation

Law 6/2023 of 17 March on Securities Markets and Investment Services.

Law 10/2014 of 26 June on the Organisation, Supervision and Solvency of Credit Institutions.

Royal Decree 813/2023 concerning the legal framework for investment firms and other investment-service providers.

Applicable Spanish implementing regulations and supervisory provisions.

B. European Union Legislation

Directive 2014/65/EU – Markets in Financial Instruments Directive II.

Regulation (EU) No 600/2014 – Markets in Financial Instruments Regulation.

Regulation (EU) No 1024/2013 – Single Supervisory Mechanism.

Regulation (EU) No 575/2013 – Capital Requirements Regulation.

Directive 2013/36/EU – Capital Requirements Directive.

Directive 93/13/EEC – Unfair Terms in Consumer Contracts.

Commission Delegated Regulation (EU) 2017/565 – MiFID II organisational and conduct requirements.

C. Four Judicial Decisions

Banco Español de Crédito SA v. Joaquín Calderón Camino, Case C-618/10, CJEU, 14 June 2012.

Genil 48 SL and Comercial Hostelera de Grandes Vinos SL v. Bankinter SA and Banco Bilbao Vizcaya Argentaria SA, Case C-604/11, CJEU, 30 May 2013.

Banif Plus Bank Zrt v. Csaba Csipai and Viktória Csipai, Case C-472/11, CJEU, 21 February 2013.

Banco Santander SA v. J.A.C. and M.C.P.R., Case C-598/21, CJEU, 12 January 2023.

D. International Regulatory References

European Securities and Markets Authority – MiFID II supervisory guidance and investor-protection materials.

European Banking Authority – Banking governance and supervisory guidance.

European Central Bank – Single Supervisory Mechanism framework.

Basel Committee on Banking Supervision – Basel Framework.

International Organization of Securities Commissions – Objectives and Principles of Securities Regulation.

Banco de España – Applicable banking supervisory rules.

Comisión Nacional del Mercado de Valores – Applicable investment-services supervisory rules.

Legal Note: The four cases are included for their relevance to investment-services regulation and financial customer protection. Only Genil 48 directly concerns MiFID obligations in a Spanish banking context; the others address related consumer-protection principles. The discussion does not suggest that all four decisions directly determine the division of supervisory powers between Banco de España, the ECB, and the CNMV. Legislative amendments and current case-law treatment should be verified before professional or litigation use.