Banking Law and ESG Risk Management Systems — Spain

Introduction

Environmental, Social and Governance (ESG) risk management has become an important part of banking regulation in Spain. Banks increasingly need to determine whether environmental change, climate transition, social problems, or weaknesses in corporate governance could create conventional financial risks such as credit, market, liquidity, operational, reputational, concentration, or legal risk.

Spain's ESG banking framework cannot be understood through Spanish legislation alone. Spanish banks operate within the European Union banking framework, including the Capital Requirements Regulation and Directive, European Central Bank (ECB) supervision, European Banking Authority (EBA) standards, EU Taxonomy Regulation, Sustainable Finance Disclosure Regulation and Corporate Sustainability Reporting Directive.

Consequently, an effective Spanish bank's ESG risk-management system should identify, measure, monitor and control material ESG risks across lending, investment, governance, risk appetite, capital planning and disclosure.

Legal and Regulatory Framework

The principal domestic banking statute is Law 10/2014 on the regulation, supervision and solvency of credit institutions. Together with implementing legislation and EU prudential requirements, it establishes governance, risk-management and supervisory obligations applicable to Spanish credit institutions.

The Banco de España has important supervisory responsibilities. Significant Spanish banks are also directly supervised by the ECB within the Single Supervisory Mechanism (SSM).

At EU level, prudential legislation increasingly requires financial institutions to incorporate ESG risks into governance and risk-management arrangements.

The EBA has developed requirements and guidelines dealing with management and supervision of ESG risks, while the ECB's climate and environmental risk expectations have pushed significant banks toward systematic integration of these risks.

Therefore, ESG risk is increasingly part of ordinary prudential banking supervision rather than merely voluntary corporate responsibility.

Meaning of ESG Risk

Environmental Risk

Environmental risk includes climate change, pollution, biodiversity loss, water scarcity, resource depletion, environmental regulation and transition toward a low-carbon economy.

Banks commonly distinguish between physical risk and transition risk.

Physical risk concerns losses arising from climate and environmental events. For example, flooding, wildfire, drought or extreme temperatures can damage borrowers' assets and reduce repayment capacity.

Transition risk results from changes in legislation, technology, consumer preferences, energy policy and market conditions during the transition toward a more sustainable economy.

Social Risk

Social risk can arise from labour practices, workplace safety, human rights, consumer protection, discrimination, community relations, supply chains and product safety.

A serious social controversy affecting a corporate borrower can result in litigation, regulatory sanctions, loss of customers or operational disruption.

Governance Risk

Governance risks include corruption, inadequate internal controls, weak boards, conflicts of interest, excessive executive incentives, accounting irregularities, poor risk culture and ineffective compliance.

Governance failures can directly affect creditworthiness and may also create operational and reputational risks for a financing bank.

ESG Governance within Banks

Effective ESG risk management begins with the board of directors.

The board should understand the institution's material ESG exposures and ensure that these risks are incorporated into business strategy and risk appetite.

Senior management is responsible for implementing policies approved by the board.

A Spanish bank may distribute ESG responsibilities among credit-risk teams, sustainability functions, compliance departments, internal audit, model-risk teams and business units.

However, ESG risk should not remain isolated within a sustainability department. Where financially material, it should form part of the bank's ordinary risk-management framework.

ESG Risk Appetite Framework

Banks use a Risk Appetite Framework (RAF) to establish the types and levels of risks they are prepared to assume.

ESG factors can be incorporated through quantitative and qualitative limits.

For example, a bank may monitor concentrations in carbon-intensive industries, exposure to environmentally vulnerable geographical areas, financing involving severe environmental controversies, or borrowers without credible transition strategies.

Risk appetite does not necessarily require complete withdrawal from environmentally sensitive industries. Banks may instead establish enhanced due diligence, exposure limits, transition conditions or additional monitoring.

ESG Risk in Lending

Credit risk is one of the principal areas where ESG considerations become financially relevant.

Before approving a significant loan, a bank may assess the borrower's environmental liabilities, carbon exposure, energy dependence, governance structure, regulatory compliance and social controversies.

Consider a Spanish company whose assets are located in an area facing increasing physical climate risk. Damage to those assets could reduce production and weaken debt-service capacity.

Similarly, a carbon-intensive borrower may face transition risks from stricter emissions requirements.

Banks can incorporate these considerations into borrower ratings, loan pricing, covenants, collateral requirements and credit limits.

ESG and Collateral Valuation

Environmental risk can materially affect collateral.

Real estate exposed to flooding, wildfire, extreme heat or energy-efficiency requirements may experience changes in insurance costs and market value.

Industrial land affected by contamination can create remediation liabilities.

Banks should therefore consider whether environmental conditions could affect the value and enforceability of security throughout the loan's lifetime rather than relying exclusively on historical valuations.

Climate Stress Testing

Stress testing is an important component of ESG risk management.

A bank can examine hypothetical scenarios involving higher carbon prices, severe physical climate events, technological transitions, changes in energy prices or regulatory restrictions.

The objective is not to predict the future precisely. It is to understand how different scenarios could affect borrowers, collateral, profitability and capital.

ECB supervisory exercises have made climate stress testing particularly important for major euro-area institutions, including Spanish banks.

ICAAP and Capital Management

The Internal Capital Adequacy Assessment Process (ICAAP) requires banks to evaluate risks that could materially affect their capital position.

Where climate or other ESG risks are material, they should be incorporated into the institution's risk identification and capital-planning processes.

For example, a concentration of loans to sectors highly vulnerable to transition risk could create losses under an adverse regulatory scenario.

Management should therefore evaluate whether existing capital provides adequate protection.

ESG Disclosure

Transparency is another important element of Spain's ESG framework.

EU prudential disclosure requirements require relevant institutions to disclose information concerning ESG risks.

The EU Taxonomy Regulation establishes a classification framework for environmentally sustainable economic activities.

The Corporate Sustainability Reporting Directive (CSRD) and associated sustainability reporting standards increase the availability of corporate sustainability information, although their scope and implementation have continued to evolve through subsequent EU reforms.

Banks can use these disclosures as inputs into borrower and portfolio risk assessment.

Greenwashing Risk

Greenwashing occurs when environmental or sustainability claims create a misleading impression about a product, company or activity.

For banks, greenwashing can produce conduct, legal and reputational risk.

A financial institution marketing a loan, investment product or financing strategy as “green” should therefore have adequate evidence supporting that classification.

Internal controls should examine whether sustainability claims are consistent with the actual characteristics of the financing.

Case Laws

There is not yet a large body of Spanish judgments specifically establishing how banks must design internal ESG risk-management systems. The following Spanish and European cases instead illustrate legal principles concerning climate policy, environmental assessment, sustainability claims and corporate accountability that can generate financial risks relevant to banks.

1. Greenpeace España and Others v Spain — Climate Litigation

Spanish environmental organizations brought proceedings challenging the adequacy of Spain's climate policies and alleging insufficient action to meet climate objectives.

Spain's Supreme Court ultimately rejected demands for substantially stronger judicially imposed emissions targets beyond those reflected in the applicable framework.

Banking Significance

The litigation demonstrates that climate policy can become the subject of major judicial proceedings.

For banks, regulatory developments resulting from climate policy can affect energy, transport, construction and industrial borrowers and therefore become transition-risk considerations.

2. Armando Carvalho and Others v European Parliament and Council — Case T-330/18

Individuals and families challenged aspects of the European Union's climate framework, arguing that EU emissions targets provided insufficient protection.

The EU courts ultimately rejected the action on admissibility grounds.

Banking Significance

The case demonstrates the increasing use of litigation to challenge climate policy. Even unsuccessful cases can highlight potential regulatory and transition risks relevant to long-duration lending portfolios.

3. ClientEarth v European Investment Bank — Case T-9/19 and C-212/21 P

ClientEarth challenged the European Investment Bank's treatment of a biomass power project and sought review under EU environmental law.

The EU courts addressed access to environmental review and the legal treatment of financing-related decisions.

Banking Significance

The litigation is especially relevant because it connects environmental considerations with institutional financing decisions.

Banks financing environmentally sensitive projects should ensure that their ESG classification and due-diligence processes are legally and factually defensible.

4. ClientEarth v Shell plc (2023)

ClientEarth attempted to bring a derivative action against Shell's directors concerning management of climate-related risks.

The English court refused permission for the claim to proceed.

Banking Significance

Although not Spanish law, the litigation demonstrates how climate strategy can become a corporate-governance issue.

Spanish banks financing large international companies may therefore consider whether governance systems adequately identify and manage material climate risks.

5. Milieudefensie v Royal Dutch Shell

Dutch litigation against Shell addressed corporate responsibility relating to greenhouse-gas emissions.

The litigation subsequently underwent significant appellate development.

Banking Significance

The proceedings demonstrate that corporate transition strategies can create legal uncertainty.

For banks, such uncertainty can translate into credit, market and reputational risk when financing carbon-intensive borrowers.

6. Verein KlimaSeniorinnen Schweiz and Others v Switzerland (2024)

The European Court of Human Rights considered Switzerland's climate framework and found deficiencies in the state's implementation of effective climate protection.

Banking Significance

The judgment demonstrates the increasing interaction between climate change, legal obligations and governmental policy.

For banks, stronger climate regulation following legislative or judicial developments can change the economics of carbon-intensive activities and therefore affect credit portfolios.

7. Neubauer and Others v Germany (2021)

Germany's Federal Constitutional Court examined national climate legislation and concluded that aspects of the framework inadequately protected future freedom because substantial emission reductions had effectively been postponed.

Banking Significance

The case demonstrates how courts can influence the timing and intensity of climate-transition requirements.

Banks providing long-term financing should therefore assess whether borrowers can withstand future regulatory changes.

8. Urgenda Foundation v State of the Netherlands (2019)

The Dutch Supreme Court upheld an order requiring the Netherlands to achieve stronger greenhouse-gas reductions.

Banking Significance

Urgenda demonstrates that climate litigation can produce concrete governmental obligations.

If similar developments lead to accelerated regulatory transitions, banks can face indirect financial consequences through affected borrowers and investments.

Relationship of the Cases to Spanish Banking Law

These decisions must be interpreted carefully.

Most are not cases against Spanish commercial banks, and comparative judgments such as Shell, Neubauer and Urgenda are not binding Spanish banking precedents.

Their significance lies in demonstrating pathways through which ESG matters can become financial risks.

Environmental litigation may create regulatory change. Governance litigation can expose weaknesses in corporate decision-making. Climate-policy cases may accelerate transition requirements. These developments can ultimately affect borrowers' revenues, expenses, asset values and repayment capacity.

Spanish banks can therefore use such developments as inputs into forward-looking risk identification and scenario analysis.

ESG Risk Management Cycle

An effective Spanish banking system for ESG risks can be summarized as:

Identification → Materiality Assessment → Measurement → Risk Appetite → Credit/Investment Decision → Monitoring → Stress Testing → Capital Assessment → Disclosure → Internal Review.

Identification determines which ESG factors could affect the bank.

Materiality assessment distinguishes genuine financial risks from sustainability information having little connection to financial performance.

Measurement converts relevant risks into indicators, scenarios, ratings or exposure metrics.

Monitoring allows the bank to detect deterioration after credit has been granted.

Stress testing considers severe but plausible scenarios.

Finally, governance, audit and supervisory review determine whether the overall framework remains effective.

Role of the ECB and Banco de España

Spanish banking ESG supervision operates through a multi-level institutional framework.

The ECB directly supervises significant institutions within the Single Supervisory Mechanism and has established supervisory expectations concerning climate-related and environmental risks.

The Banco de España participates in the European supervisory architecture and supervises institutions within its competence.

The EBA develops regulatory standards and supervisory guidelines applying across the European banking system.

Spanish banks must therefore design ESG frameworks capable of satisfying both domestic and EU-level supervisory expectations.

Conclusion

Banking law and ESG risk management in Spain has evolved into an important component of prudential regulation. ESG factors are relevant where they generate conventional financial consequences through credit, market, operational, liquidity, concentration, reputational or legal risk.

The framework is based on Spanish banking legislation combined with EU prudential regulation, ECB supervision, EBA standards, sustainability disclosure requirements, the EU Taxonomy and broader corporate sustainability rules.

Effective ESG risk management requires board oversight, clear responsibilities, materiality assessment, risk appetite limits, borrower due diligence, collateral analysis, climate stress testing, ICAAP integration, reliable data, internal controls and transparent disclosures.

Cases including Greenpeace España climate litigation, Carvalho, ClientEarth v EIB, ClientEarth v Shell, Milieudefensie v Shell, KlimaSeniorinnen, Neubauer and Urgenda demonstrate the legal channels through which environmental and governance issues can develop into financial risks. They should not, however, be falsely described as Spanish banking decisions when they arise from EU or foreign jurisdictions.

The central principle for Spanish banks is therefore financial materiality: ESG considerations should be systematically incorporated into risk-management systems whenever they can materially affect borrowers, collateral, investments, capital adequacy or the bank's overall financial resilience.