FINANCIAL KNOWLEDGE PRODUCTION SYSTEMS UNDER SPANISH AND EUROPEAN UNION LAW

1. INTRODUCTION

Financial knowledge production systems refer to the institutional, technological, regulatory and analytical mechanisms through which financial information is collected, generated, interpreted, verified and distributed. These systems include banking databases, credit-rating mechanisms, financial research institutions, regulatory reporting platforms, financial intelligence units, economic forecasting systems and algorithmic risk-assessment tools.

In Spain, financial knowledge production plays an important role in banking supervision, monetary policy, investment decisions, consumer protection, financial stability and economic governance. Institutions such as the Banco de España, the Spanish National Securities Market Commission (CNMV), the National Statistics Institute (INE) and the European Central Bank contribute to the production and dissemination of financial knowledge.

The legal challenge is ensuring that financial information is accurate, transparent, accountable and lawfully processed without creating discriminatory financial practices or compromising individual privacy.

2. LEGAL AND REGULATORY FRAMEWORK

A. SPANISH CONSTITUTIONAL FRAMEWORK

Article 20 protects freedom of expression and the communication and receipt of information.

Article 18 protects privacy and personal data.

Article 9(3) establishes legal certainty and prohibits arbitrary public action.

Article 31 provides constitutional principles governing the public financial system.

These provisions establish important foundations for the collection, production and dissemination of financial information.

B. GENERAL DATA PROTECTION REGULATION

Regulation (EU) 2016/679 (GDPR) regulates personal-data processing within financial knowledge systems.

Important provisions include:

Article 5: Principles of lawful, fair and transparent processing.

Article 6: Lawfulness of processing.

Article 15: Right of access to personal data.

Article 16: Right to rectification.

Article 22: Safeguards concerning certain solely automated decisions.

Article 32: Security of processing.

C. SPANISH ORGANIC LAW 3/2018

The Organic Law on Personal Data Protection and Guarantee of Digital Rights supplements the GDPR in Spain. It establishes national requirements for personal-data protection and digital rights.

D. BANKING AND FINANCIAL SUPERVISION LEGISLATION

Law 10/2014 on the Organisation, Supervision and Solvency of Credit Institutions establishes important supervisory requirements for Spanish credit institutions.

Law 10/2010 on the Prevention of Money Laundering and Terrorist Financing establishes financial intelligence and customer-monitoring obligations.

E. EU FINANCIAL MARKET REGULATION

Regulation (EU) No. 1093/2010 establishes the European Banking Authority (EBA), which contributes to regulatory convergence, supervisory analysis and the development of financial standards.

3. MAJOR FINANCIAL KNOWLEDGE PRODUCTION SYSTEMS

A. CENTRAL BANK KNOWLEDGE PRODUCTION

The Banco de España produces economic research, banking statistics, financial stability assessments and monetary-policy analysis. Its knowledge-production activities support regulatory supervision and national economic decision-making.

B. CREDIT INFORMATION SYSTEMS

Credit information systems generate financial assessments concerning borrowers, repayment histories and creditworthiness. In Spain, the Central Credit Register (CIR) operated by the Banco de España provides information concerning credit risks reported by participating institutions.

C. FINANCIAL INTELLIGENCE SYSTEMS

Spain's Executive Service of the Commission for the Prevention of Money Laundering and Monetary Offences (SEPBLAC) receives and analyses information relevant to preventing money laundering and terrorist financing.

D. ALGORITHMIC FINANCIAL KNOWLEDGE

Financial institutions increasingly employ artificial intelligence, machine learning and statistical models to evaluate creditworthiness, identify suspicious transactions and forecast financial risks.

These systems must operate consistently with applicable data-protection, consumer-protection and financial-sector requirements.

E. PUBLIC FINANCIAL INFORMATION

Public institutions produce financial statistics, budgetary reports, economic forecasts and market information. These activities support transparency, public accountability and informed economic participation.

4. MAJOR REGULATORY CONCERNS

A. DATA ACCURACY AND RELIABILITY

Incorrect financial information may lead to unjustified loan refusals, inaccurate credit assessments and reputational harm. Financial institutions must maintain appropriate procedures for correcting inaccurate personal information.

B. ALGORITHMIC BIAS

Automated financial assessment systems may disadvantage individuals because of inaccurate datasets, indirect discrimination or unsuitable risk classifications.

C. FINANCIAL INFORMATION MONOPOLISATION

Concentrated control over financial databases and analytical infrastructure may restrict competition and create unequal access to essential financial information.

D. PRIVACY AND CONFIDENTIALITY

Financial knowledge production frequently involves sensitive economic and personal information. Its collection, storage and distribution must comply with GDPR and applicable banking-secrecy requirements.

E. TRANSPARENCY AND ACCOUNTABILITY

Consumers should have meaningful information concerning relevant financial decisions and mechanisms for challenging inaccurate records or unlawful data processing.

5. IMPORTANT CASE LAWS

1. SCHUFA HOLDING AG (CASE C-634/21, CJEU, 2023).

The Court examined automated credit scoring and the circumstances in which the creation of a probability value concerning a person's ability to meet financial obligations may constitute automated individual decision-making under Article 22 GDPR.

Relevance: Direct authority concerning automated creditworthiness assessment and financial knowledge production.

2. DUN & BRADSTREET AUSTRIA (CASE C-203/22, CJEU, 2025).

The Court examined the right to meaningful information about the logic involved in automated decision-making under GDPR. It clarified the importance of explaining procedures and principles underlying automated decisions.

Relevance: Direct authority concerning transparency and explainability in algorithmic financial knowledge systems.

3. NOWAK v DATA PROTECTION COMMISSIONER (CASE C-434/16, CJEU, 2017).

The Court considered whether examination answers and examiner comments constituted personal data under EU data-protection law.

Relevance: Analogous authority establishing the broad scope of personal data, relevant to financial databases and information records.

4. GOOGLE SPAIN SL AND GOOGLE INC. v AEPD AND MARIO COSTEJA GONZÁLEZ (CASE C-131/12, CJEU, 2014).

The Court recognised the importance of individual rights concerning personal information processed by search engines and established the right to request removal of certain search results under the applicable data-protection framework.

Relevance: Analogous authority concerning control over the circulation and accessibility of personal financial information.

5. ASNEF AND FECEMD (JOINED CASES C-468/10 AND C-469/10, CJEU, 2011).

The Court examined legitimate-interest grounds for processing personal data under the former EU Data Protection Directive.

Relevance: Directly relevant to the legal foundations of personal-data processing in commercial and financial information databases.

6. VOLKER UND MARKUS SCHECKE AND EIFERT (JOINED CASES C-92/09 AND C-93/09, CJEU, 2010).

The Court examined the publication of personal information concerning beneficiaries of agricultural subsidies and the balance between transparency and privacy.

Relevance: Analogous authority concerning public financial-information disclosure and proportionality.

6. REGULATORY RESPONSIBILITIES OF FINANCIAL INSTITUTIONS

Spanish financial institutions and relevant public authorities should:

Maintain accurate and regularly updated financial databases.

Establish procedures for correcting inaccurate credit information.

Ensure lawful grounds for collecting and processing personal data.

Conduct appropriate assessments of algorithmic discrimination.

Provide meaningful explanations of relevant automated decisions.

Implement cybersecurity and access-control measures.

Maintain appropriate records of financial-information processing.

Protect confidential customer information.

Ensure that financial reporting complies with supervisory requirements.

Establish effective complaint and review mechanisms.

7. ENFORCEMENT AND INSTITUTIONAL SUPERVISION

The principal institutions responsible for financial knowledge governance in Spain include:

Banco de España: Banking supervision, credit-risk information and financial stability analysis.

CNMV: Supervision of securities markets and regulated financial-market information.

SEPBLAC: Financial intelligence and anti-money laundering analysis.

AEPD: Enforcement of personal-data protection requirements.

European Central Bank: Monetary policy, banking supervision within the Single Supervisory Mechanism and financial-system analysis.

European Banking Authority: Regulatory convergence and supervisory standards.

These institutions contribute to ensuring that financial knowledge systems operate within applicable legal and regulatory boundaries.

8. CONCLUSION

Financial knowledge production systems are essential to Spain's modern financial governance because they support banking supervision, credit allocation, economic forecasting, financial intelligence and investment decisions. However, the increasing reliance on automated data analysis and interconnected financial databases creates significant legal concerns involving privacy, discrimination, accuracy, transparency and institutional accountability.

Spanish and European legislation establish safeguards to ensure that financial knowledge is generated and used lawfully. The SCHUFA and Dun & Bradstreet judgments are particularly significant because they clarify the legal responsibilities associated with automated financial assessment and transparency. Ultimately, an effective financial knowledge production system must balance technological innovation, reliable information, consumer rights and responsible financial governance.