Banking Law and ESG Reporting Enforcement in Europe – Spain

Introduction

Environmental, Social and Governance (ESG) reporting has developed from largely voluntary corporate disclosure into an increasingly regulated component of European corporate and financial law.

For Spanish banks, ESG reporting involves disclosure of information concerning matters such as climate risks, greenhouse-gas emissions, environmental impacts, employees and human rights, governance structures, anti-corruption controls, sustainability objectives, and the relationship between sustainability risks and financial performance.

Spain's framework must be understood at two interconnected levels:

European Union law, which establishes sustainability-reporting and sustainable-finance requirements; and Spanish law, which implements and enforces applicable EU requirements through corporate, securities, accounting, auditing, and banking legislation.

Important supervisory institutions include the Comisión Nacional del Mercado de Valores (CNMV), Banco de España, the European Central Bank and European supervisory authorities.

ESG reporting therefore increasingly operates as a matter of regulatory compliance rather than merely voluntary corporate communication.

Spanish Legal Framework

An important Spanish foundation is Law 11/2018 of 28 December on non-financial information and diversity.

It amended the Commercial Code, Companies Act and Audit Act and implemented the earlier EU Non-Financial Reporting Directive framework.

Companies within its scope have been required to provide information concerning matters such as:

environmental issues;

social and employee matters;

human rights;

anti-corruption and bribery;

society;

business model;

policies and due-diligence procedures;

principal non-financial risks; and

relevant non-financial indicators.

The legislation requires information concerning significant risks, including risks that have already materialised and those likely to cause serious adverse effects.

For banks, this means that sustainability reporting is connected to actual risk governance rather than simply the publication of environmental achievements.

EU Corporate Sustainability Reporting Directive

The Corporate Sustainability Reporting Directive – Directive (EU) 2022/2464 (CSRD) substantially expanded the EU sustainability-reporting architecture.

It introduced more detailed reporting requirements and the use of European Sustainability Reporting Standards (ESRS).

A particularly important concept is double materiality.

Companies assess sustainability from two perspectives:

Financial materiality – how sustainability matters affect the company's financial position, development and performance.

Impact materiality – how the company's activities affect people and the environment.

For a Spanish bank, this can require consideration not only of environmental effects arising from its own offices and operations but also material sustainability issues associated with financing and investment activities.

European Sustainability Reporting Standards

The ESRS provide the detailed reporting structure supporting the European sustainability-reporting regime.

Relevant subjects include:

climate change;

pollution;

water and marine resources;

biodiversity;

resource use and circular economy;

the company's workforce;

workers in the value chain;

affected communities;

consumers and end-users; and

business conduct.

For banks, governance and risk-management disclosures are particularly significant because sustainability factors can affect credit, market, operational, reputational and strategic risks.

EU Taxonomy and Banking Reporting

The EU Taxonomy Regulation establishes a classification system for environmentally sustainable economic activities.

Financial institutions may have to report specified indicators showing the relationship between their activities and taxonomy-eligible or taxonomy-aligned economic activities.

This is especially important for banks because their environmental footprint extends substantially through lending and investment portfolios.

Consequently, regulators increasingly examine whether the data and methodology underlying sustainability indicators are reliable and adequately explained.

Sustainable Finance Disclosure Regulation

The Sustainable Finance Disclosure Regulation (SFDR) is also relevant where financial-market participants and financial advisers provide investment products or portfolio-management services.

It requires specified sustainability disclosures at entity and product levels.

The purpose is to improve transparency concerning sustainability risks and characteristics and reduce misleading sustainability claims.

For banking groups combining ordinary banking with asset management, investment funds or advisory services, ESG reporting obligations may therefore arise under several overlapping regulatory regimes.

Role of CNMV

The CNMV has an important enforcement and supervisory function concerning securities-market disclosures by Spanish issuers.

It reviews financial and non-financial reporting and can require issuers to provide additional information or correct deficiencies where appropriate.

CNMV reviews of Spanish non-financial information have examined matters including:

climate objectives;

taxonomy disclosures;

emissions;

social information;

governance;

materiality;

reporting methodologies; and

quality of sustainability disclosures.

Enforcement is therefore not limited to checking whether a sustainability report physically exists. Regulators increasingly focus on whether the disclosed information is complete, consistent and sufficiently supported.

Role of Banco de España and ECB

For banks, ESG reporting also intersects with prudential supervision.

Banco de España and the European Central Bank consider climate-related and environmental risks within banking supervision.

A bank may therefore face two connected questions:

What sustainability information must it publicly disclose?

and

Does its internal governance and risk-management system support what it reports?

For example, a bank claiming sophisticated climate-risk management should have appropriate governance, data, methodologies, controls and risk processes supporting that statement.

Assurance and Verification

The European framework has strengthened the importance of assurance over sustainability information.

Independent assurance reduces the possibility that sustainability disclosures consist solely of unsupported management claims.

The assurance process may examine whether:

required information has been provided;

appropriate reporting standards were followed;

data-collection procedures are reliable;

materiality assessments are appropriately conducted; and

reported indicators can be supported by evidence.

The development of sustainability assurance moves ESG information closer to the control environment traditionally associated with financial statements.

Greenwashing and Enforcement

One of the major enforcement concerns is greenwashing.

Greenwashing occurs where sustainability statements create an inaccurate or exaggerated impression regarding an institution, investment product or economic activity.

Examples could include describing a financial product as “green” despite failing to follow the environmental methodology advertised to investors, or presenting selective sustainability indicators while concealing material adverse information where disclosure law requires it.

Potential consequences can include:

regulatory investigation;

corrective disclosure;

administrative sanctions;

investor claims;

consumer-protection consequences;

reputational damage; and

potential director or corporate liability depending upon the circumstances.

The central legal issue is therefore not whether ESG language appears in a report but whether material statements are accurate, supportable and compliant with applicable reporting standards.

Board Responsibility

ESG reporting is also a governance issue.

Directors and senior management cannot safely regard sustainability reporting as exclusively the responsibility of a marketing or sustainability department.

An effective reporting system should involve:

board oversight;

management responsibility;

risk management;

compliance;

internal controls;

internal audit;

finance and accounting teams; and

appropriate external assurance.

Banks should establish systems capable of tracing material ESG statements back to reliable underlying information.

Case Laws and Judicial Authorities

There remains limited Spanish jurisprudence directly interpreting CSRD/ESRS sustainability reports themselves. CSRD is comparatively recent and the regulatory framework has continued evolving.

The following cases are therefore relevant because they establish principles concerning environmental reporting, disclosure, enforcement, corporate accountability and the effectiveness of EU regulatory obligations.

1. Commission v Spain, Case C-403/11, CJEU, 4 October 2012

This case concerned Spain's obligations under the EU Water Framework Directive.

Spain failed to comply with requirements concerning river-basin management plans, including publication, public consultation and reporting obligations.

The Court found a failure to fulfil EU-law obligations.

The case is relevant to ESG reporting because it demonstrates an important European principle: information, publication and reporting obligations established by EU environmental legislation are enforceable legal duties rather than merely administrative aspirations.

For regulated financial institutions, the broader lesson is that mandatory sustainability disclosure requirements must be complied with substantively and within the required framework.

2. Commission v Spain, Case C-219/05, CJEU, 19 April 2007

This infringement proceeding concerned Spain's failure to comply fully with requirements under the Urban Waste Water Treatment Directive.

The Court found infringement of EU environmental obligations.

Although not a banking-reporting case, it demonstrates that environmental compliance obligations imposed by EU legislation can lead to judicial enforcement against a Member State.

This matters for banks because reported ESG exposures frequently depend upon whether financed companies comply with environmental legislation.

3. Commission v Spain, Case C-121/03, CJEU

This case concerned several EU environmental requirements involving waste, groundwater and environmental assessment.

The Court examined whether Spain had fulfilled its obligations under multiple environmental directives.

The case demonstrates the practical enforceability of environmental standards underlying corporate ESG reporting.

If a bank reports environmental risks associated with borrowers or financed projects, regulatory compliance by those companies can therefore represent a financially material consideration rather than a theoretical sustainability issue.

4. Commission v Spain, Case C-67/12, CJEU, 16 January 2014

This proceeding concerned implementation of EU requirements regarding the energy performance of buildings.

The Court found that Spain had failed to fulfil certain obligations under the applicable EU framework.

Energy efficiency is directly relevant to contemporary ESG reporting because building portfolios, mortgages and commercial real-estate exposures can carry transition risks arising from energy-performance requirements.

For banks, such legal changes may influence collateral values, credit risks and sustainability indicators.

5. Commission v Spain, Case C-205/17, CJEU, 25 July 2018

This case is especially important from an enforcement perspective.

It concerned Spain's continuing failure to comply with an earlier Court judgment relating to EU environmental obligations.

The proceeding illustrates that failure to correct an established regulatory breach can lead to further enforcement under Article 260 TFEU.

The ESG-reporting lesson is important: European regulatory obligations are backed by mechanisms designed to achieve effective compliance rather than merely formal reporting.

6. Commission v Spain, Case C-559/19 – Doñana, CJEU, 24 June 2021

This major environmental case concerned deterioration of the protected Doñana natural area and groundwater pressures.

The Court found Spain in breach of important obligations under EU environmental law.

The decision has substantial ESG significance because biodiversity, water management and ecosystem impacts are now increasingly incorporated into sustainability-risk analysis.

For financial institutions, the case demonstrates that environmental dependencies and impacts can create genuine regulatory consequences affecting financed industries such as agriculture, infrastructure and real estate.

7. Commission v Spain, Case C-642/18 – Waste Management Plans, CJEU, 5 December 2019

This proceeding concerned Spain's obligations relating to waste-management planning.

Although the action was ultimately declared inadmissible on procedural grounds, the litigation demonstrates the European Commission's ability to use infringement proceedings to pursue failures involving environmental planning and reporting frameworks.

For ESG purposes, waste management and circular-economy information can form part of environmental reporting and investment-risk analysis.

8. Spanish Securities-Market Enforcement Jurisprudence

Spanish Audiencia Nacional and Supreme Court jurisprudence reviewing CNMV enforcement decisions provides an additional body of law relevant to ESG reporting.

Although much of this jurisprudence predates modern CSRD terminology, it establishes an important principle: securities-market disclosure and reporting obligations are regulatory duties capable of administrative enforcement and judicial review.

This principle applies increasingly to sustainability information as ESG disclosures become incorporated into regulated corporate reporting.

Enforcement Mechanisms

ESG reporting enforcement in Spain can operate through several channels.

Corporate reporting enforcement concerns compliance with statutory sustainability-reporting obligations.

CNMV supervision applies particularly to securities issuers and regulated market disclosures.

Auditor and assurance supervision addresses verification of reported information.

Banking supervision examines whether sustainability disclosures correspond with sound governance and risk management.

Administrative sanctions may arise where relevant statutory requirements are breached.

Civil litigation may become relevant where materially misleading information causes legally recoverable investor or customer loss.

EU enforcement can also operate against Member States that fail to implement or apply EU requirements properly.

These mechanisms collectively mean that ESG reporting increasingly has consequences comparable to other regulated corporate disclosures.

Internal Controls for Spanish Banks

A Spanish bank should maintain a structured ESG-reporting system.

First, it should determine which sustainability requirements apply to the institution and its consolidated group.

Second, it should conduct an appropriate materiality assessment.

Third, responsibility for individual data points should be allocated to identifiable departments.

Fourth, important ESG indicators should be supported by documented methodologies.

Fifth, financial and sustainability information should be checked for consistency.

Sixth, internal controls should identify errors before publication.

Finally, senior management and the board should receive sufficient information to supervise material sustainability disclosures.

Relationship Between ESG Reporting and Prudential Risk

ESG reporting should not operate separately from banking risk management.

Suppose a bank reports that climate transition risk is material within its commercial real-estate portfolio.

That conclusion should logically connect with its:

credit-risk processes;

portfolio monitoring;

collateral valuation;

scenario analysis;

risk appetite;

capital planning; and

strategic decisions.

Similarly, if environmental risk is described as immaterial, the institution should have an appropriate methodology supporting that conclusion.

This connection between external reporting and internal risk governance is becoming increasingly important in European banking supervision.

Conclusion

ESG reporting enforcement in Spain operates through an interconnected European and Spanish legal framework.

The principal architecture includes Spanish Law 11/2018, the CSRD framework, European Sustainability Reporting Standards, the EU Taxonomy, SFDR where applicable, Spanish corporate and securities law, and banking supervisory requirements.

For Spanish banks, sustainability reporting is consequently developing into a regulated disclosure and risk-governance function rather than remaining a voluntary CSR exercise.

The relevant jurisprudence demonstrates a broader but important European principle: environmental, information, disclosure and regulatory obligations can be judicially enforced, and continuing non-compliance can lead to further legal consequences.

Because direct Spanish judicial interpretation of CSRD and ESRS reporting requirements is still developing, older environmental and securities-law cases should not be misrepresented as direct CSRD precedents. Their importance lies instead in the enforcement principles they establish.

Accordingly, effective ESG reporting enforcement requires Spanish banks to ensure that sustainability disclosures are material, accurate, evidence-based, internally controlled, appropriately assured, consistent with financial information and supported by the institution's actual risk-management and governance systems.