Banking Law and Insider Trading Enforcement in Spain

1. Introduction

Insider trading, normally called insider dealing in European securities law, occurs when a person possesses material non-public information concerning an issuer or financial instrument and improperly uses that information in connection with trading.

In Spain, insider-trading enforcement is particularly important for banks because banks can occupy several positions simultaneously. They may be:

issuers of listed shares or debt;

investment-service providers;

lenders to listed companies;

advisers in mergers and acquisitions;

underwriters of securities;

custodians;

asset managers; and

holders of confidential information about clients and transactions.

Consequently, bank directors, employees, advisers and other persons may obtain price-sensitive information before it becomes public.

Spain's modern regime is based principally on EU Regulation No. 596/2014 on Market Abuse (MAR) and Law 6/2023 of 17 March on Securities Markets and Investment Services. Under the current Spanish legislation, the Comisión Nacional del Mercado de Valores (CNMV) is Spain's competent authority for application of MAR.

2. Meaning of Inside Information

Inside information generally has four central characteristics.

It must be:

sufficiently precise;

related directly or indirectly to one or more issuers or financial instruments;

non-public; and

information that would be likely to have a significant effect on the price of the relevant financial instruments if made public.

The "reasonable investor" concept is important in determining whether information is price-sensitive.

Spanish legislation historically followed substantially the same approach. Earlier Spanish market-abuse rules defined inside information as sufficiently specific, non-public information concerning securities, financial instruments or issuers that could appreciably influence market prices.

3. Examples in the Banking Sector

Suppose a senior executive of a Spanish bank learns confidentially that the bank is about to acquire another financial institution.

The information has not been publicly announced.

If publication would probably cause a significant movement in either institution's share price, the information may constitute inside information.

The executive cannot simply purchase shares before the announcement and then sell them after the market reacts.

The prohibition can also become relevant where the person:

sells securities;

cancels or modifies an existing order;

recommends a transaction to somebody else; or

improperly discloses the information.

Thus insider dealing is broader than the stereotypical situation of an executive buying shares immediately before favourable news.

4. EU Market Abuse Regulation

The central legal instrument is the Market Abuse Regulation (MAR), Regulation (EU) No. 596/2014.

MAR creates a directly applicable European framework dealing with:

inside information;

insider dealing;

unlawful disclosure;

market manipulation;

issuer disclosure;

insider lists;

managers' transactions; and

enforcement.

Spain supplements this European framework through its domestic securities legislation.

Law 6/2023 expressly identifies the CNMV as Spain's competent authority for applying MAR.

5. Persons Covered by Insider-Trading Rules

The prohibition is not limited to directors.

It can apply to persons who obtain information because they are:

directors;

executives;

employees;

shareholders;

lawyers;

accountants;

consultants;

investment bankers;

financial advisers;

auditors; or

other professional advisers.

It can also apply to a person who obtains inside information through other circumstances where that person knows, or should understand, its inside nature under the applicable legal test.

Therefore, someone outside the issuing company may still face insider-dealing liability.

6. Why Banks Face Particularly High Exposure

Banks routinely receive confidential information.

Consider a bank financing the acquisition of a listed Spanish company.

Before the transaction is announced, employees working on the financing may know:

the identity of the buyer;

the proposed acquisition price;

financing arrangements;

expected announcement date; and

whether negotiations are advanced.

This information can potentially influence the market price.

The bank must therefore maintain appropriate controls preventing employees who possess the information from improperly trading or communicating it.

7. Information Barriers

Banks and investment firms commonly use internal information barriers to restrict the circulation of sensitive information.

For example, an investment-banking team advising a confidential acquisition should not automatically provide that information to employees making investment decisions elsewhere in the institution.

Controls may include:

restricted-access files;

confidentiality requirements;

insider lists;

restricted securities lists;

monitoring of employee transactions;

pre-clearance procedures;

physical or electronic access restrictions;

compliance surveillance; and

staff training.

Earlier Spanish securities legislation expressly required relevant financial-market entities to protect inside information and take appropriate measures to prevent abusive or unfair use.

8. Insider Lists

MAR requires issuers and persons acting on their behalf or account, in relevant circumstances, to maintain lists of people who have access to inside information.

An insider list can record matters such as:

identity of the insider;

reason for inclusion;

date and time access began; and

subsequent updates.

These records are important during an investigation because they can help reconstruct who knew confidential information and when.

Spanish law treats serious failures involving insider lists as potentially significant infringements, particularly where deficiencies prevent authorities from identifying people with access to inside information or determining when access occurred.

9. Public Disclosure of Inside Information

An important part of insider-trading prevention is timely disclosure.

Article 226 of Law 6/2023 requires relevant issuers whose securities are traded on a Spanish regulated market, or for which admission has been requested, to communicate inside information concerning them to the CNMV as soon as possible in accordance with MAR.

The CNMV then makes that information publicly available.

The basic logic is straightforward.

Before publication, a small group may possess valuable confidential information.

After proper public disclosure, investors can assess the information on a more equal basis.

10. Delayed Disclosure

Immediate disclosure is not always required.

MAR permits delayed disclosure under specified conditions.

For example, premature publication during sensitive negotiations may sometimes prejudice an issuer's legitimate interests.

However, delay is not simply an unrestricted right to keep favourable or unfavourable information secret.

The relevant legal requirements must be satisfied, particularly regarding legitimate interests, misleading the public and preservation of confidentiality.

For banks, additional considerations can arise where disclosure concerns financial stability.

11. Role of the CNMV

The CNMV is the principal securities-market authority responsible for market-abuse supervision in Spain.

Law 6/2023 gives it extensive supervisory and inspection powers and expressly makes it the competent authority for MAR.

Its enforcement activities can involve:

investigating suspicious transactions;

obtaining information;

analysing trading records;

inspecting regulated entities;

reviewing communications;

examining insider lists;

imposing administrative sanctions where legally justified; and

cooperating with other authorities.

The CNMV also maintains a public register of sanctions.

12. Administrative and Criminal Enforcement

Spain's insider-trading framework should not be understood as purely administrative.

Serious market-abuse conduct can potentially produce both:

Administrative consequences

and

criminal consequences.

Administrative proceedings normally involve securities legislation and the CNMV's enforcement powers.

Particularly serious conduct may fall within provisions of Spanish criminal law.

The existence of parallel administrative and criminal regimes also raises important procedural protections, including proportionality and the principle against improper double punishment.

13. Evidence in Insider-Trading Investigations

Direct evidence is not always available.

A regulator rarely possesses a document stating:

"I am trading because I know confidential information."

Instead, an investigation may examine circumstantial evidence.

For example:

A bank executive learns confidential information on Monday.

A connected person purchases a substantial number of shares on Tuesday.

The transaction is publicly announced on Thursday.

The share price rises substantially on Friday.

That sequence alone does not automatically establish liability, but regulators may investigate:

communications;

relationships;

timing;

trading patterns;

access records;

financial records;

unusual transaction size; and

explanations given by the persons involved.

The complete evidentiary picture matters.

14. Case Law 1 — Spector Photo Group NV and Van Raemdonck

Case C-45/08, Spector Photo Group NV and Chris Van Raemdonck v CBFA

This is one of the most important European insider-dealing judgments.

Spector Photo Group purchased its own shares before publishing information, after which its share price increased. The Belgian financial regulator treated certain purchases as insider dealing and imposed financial penalties.

The case reached the Court of Justice of the European Union through a preliminary reference.

The Court considered the meaning of "use" of inside information and the conditions for insider-dealing liability.

Importance for Spain

Because Spanish insider-trading law operates within the EU market-abuse framework, CJEU interpretation is highly important.

Spector demonstrates that regulators do not necessarily have to establish a separately expressed subjective intention in the simplistic sense of proving that the trader verbally decided to exploit confidential information.

At the same time, the legal framework must respect fundamental rights and permit the circumstances of the transaction to be properly assessed.

15. Case Law 2 — Lafonta v AMF

Case C-628/13, Jean-Bernard Lafonta v Autorité des marchés financiers

This CJEU case addressed the meaning of precise information.

The dispute concerned information associated with a financial operation and whether it could qualify as inside information even where it was impossible to determine with certainty whether the eventual effect on the relevant security's price would be upward or downward.

The Court's approach is important because inside information does not necessarily have to reveal exactly which direction the price will move.

Importance for Spanish Banks

Suppose a Spanish bank executive knows confidentially that the institution is entering a transformative transaction.

The person cannot necessarily argue:

"I did not know whether the share price would rise or fall."

The legal question is whether the information satisfies the applicable criteria for inside information, rather than whether the insider could perfectly predict the market's direction.

16. Case Law 3 — Geltl v Daimler AG

Case C-19/11, Markus Geltl v Daimler AG

This important CJEU decision concerned information developing through a multi-stage process.

The case arose from events preceding the departure of Daimler's chief executive.

The Court considered when intermediate steps in an extended process could themselves constitute precise information.

Principle

Inside information does not necessarily arise only when the final transaction or event becomes certain.

An intermediate step can itself potentially constitute inside information where the relevant legal requirements are satisfied.

Banking Example

Imagine negotiations for a bank merger progressing through:

preliminary discussions;

confidentiality agreement;

due diligence;

indicative valuation;

board discussions;

final agreement.

Compliance teams should not assume that inside information exists only at stage six.

An earlier stage may already satisfy the applicable test.

17. Case Law 4 — Georgakis

Case C-391/04, Georgakis

The CJEU considered market-abuse questions involving transactions among persons possessing relevant information.

One important issue was whether transactions taking place among parties who possessed the same information fell within the insider-dealing prohibition in the circumstances before the Court.

Importance

The judgment demonstrates that insider-dealing analysis depends not merely upon asking whether somebody possessed confidential information but also upon examining how that information was used and the nature of the transaction.

For Spanish financial institutions, compliance analysis therefore requires consideration of the complete factual context.

18. Case Law 5 — IMC Securities

Case C-445/09, IMC Securities BV v Stichting Autoriteit Financiële Markten

Although principally associated with market manipulation rather than classic insider dealing, the judgment is important to the broader European market-abuse enforcement framework.

The CJEU considered interpretation of concepts used in EU market-abuse legislation.

Importance for Spain

Spanish banks and investment firms must consider market abuse as a wider compliance category.

A transaction can raise questions not only about possession of inside information but also about:

artificial pricing;

misleading market signals;

manipulative strategies; and

trading integrity.

Banks therefore require integrated market-abuse surveillance rather than an insider-trading policy operating in isolation.

19. Case Law 6 — Grande Stevens and Others v Italy

European Court of Human Rights — Grande Stevens and Others v Italy

This major case concerned Italian market-manipulation proceedings involving administrative sanctions followed by criminal proceedings.

The European Court of Human Rights examined the implications of the ne bis in idem principle—the protection against being tried or punished twice for substantially the same conduct.

Importance for Spain

Spain also operates administrative and criminal enforcement mechanisms for serious market abuse.

Consequently, authorities must consider procedural protections when administrative and criminal proceedings potentially overlap.

The case is important not because it defines inside information, but because it concerns the enforcement architecture surrounding market-abuse offences.

20. Case Law 7 — Di Puma and Zecca

Joined Cases C-596/16 and C-597/16, Di Puma and Zecca

These CJEU proceedings concerned the relationship between criminal findings and subsequent administrative proceedings concerning insider dealing.

The Court examined EU rules together with fundamental protections such as the principle of res judicata.

Importance

Insider-trading enforcement cannot be viewed solely as a question of whether suspicious trading occurred.

Authorities must also respect:

final judicial decisions;

defence rights;

procedural fairness; and

the legal relationship between different enforcement proceedings.

This is directly relevant to Spain's combined administrative and criminal enforcement structure.

21. Case Law 8 — DB v Commissione Nazionale per le Società e la Borsa

Case C-481/19, DB v CONSOB

This CJEU judgment addressed an important enforcement question: whether a natural person facing potentially punitive administrative proceedings could be sanctioned for refusing to provide answers that might establish that person's own liability.

The Court recognised important protections associated with the right to silence.

Importance for Spain

The CNMV has substantial investigatory powers, but those powers operate within EU fundamental-rights requirements.

Market-abuse enforcement therefore requires a balance between:

effective regulatory investigation

and

procedural rights of investigated individuals.

22. Case Law 9 — Volkswagen / BaFin Disclosure Jurisprudence

European case law concerning issuer disclosure has further developed the relationship between confidential corporate events and the obligation to disclose inside information.

This body of jurisprudence is especially relevant where complex corporate investigations or management events develop over time.

For banks, the practical lesson is important:

An institution cannot simply wait until every factual detail is final before asking whether inside information exists.

The legal assessment must be continuously updated as circumstances develop.

23. Insider Trading by Bank Employees

Consider the following hypothetical situation.

A Spanish bank is advising Company A on the confidential acquisition of listed Company B.

A bank employee sees the transaction documents.

The employee purchases Company B shares before the acquisition is announced.

After the announcement, Company B's share price increases.

The legal analysis would examine:

First: Was the acquisition information precise?

A sufficiently advanced confidential acquisition proposal may satisfy this requirement.

Second: Was it public?

If it had not been announced, it was non-public.

Third: Was it price-sensitive?

An acquisition offer can plainly be capable of materially affecting market valuation.

Fourth: Did the employee possess the information?

Document access and internal records could become relevant evidence.

Fifth: Was the information improperly used?

The timing and circumstances of the employee's trading would be examined.

This is a classic scenario in which insider-dealing enforcement can intersect directly with banking compliance.

24. Tipping

The original insider does not necessarily need to execute the trade personally.

Suppose the employee tells a friend:

"A major takeover is about to be announced. Buy these shares."

The situation may involve unlawful disclosure and the recipient's subsequent dealing can create additional legal issues.

Therefore, effective insider-trading law targets both direct trading and improper transmission of privileged information.

25. Recommendations Based on Inside Information

Liability can also arise where an insider recommends or induces another person to trade on the basis of inside information.

This prevents an obvious circumvention.

Without such a rule, an executive could simply avoid personally purchasing shares and instead arrange for another person to execute the economically beneficial transaction.

European market-abuse rules therefore extend beyond direct personal trading.

26. Managers' Transactions

MAR also contains transparency rules concerning transactions conducted by persons discharging managerial responsibilities and persons closely associated with them.

Spain's Law 6/2023 expressly contains provisions concerning transactions by persons with managerial responsibilities and closely associated persons.

These reporting requirements are not identical to insider-trading prohibitions.

A manager's transaction can be lawful but nevertheless subject to notification.

Conversely, notification does not legalise a transaction that constitutes insider dealing.

27. Closed Periods

MAR imposes restrictions on certain transactions by senior managers during specified periods before financial reporting.

The purpose is preventive.

During preparation of financial results, senior management may possess particularly sensitive financial information.

A closed-period rule therefore reduces the risk of trading when informational inequality is especially acute.

Banks should incorporate these restrictions into internal dealing policies.

28. Internal Compliance Programmes

A strong Spanish bank compliance system should normally address several interconnected matters:

identification of inside information;

classification of confidential projects;

insider lists;

employee personal-account dealing;

restricted securities;

information barriers;

managers' transactions;

suspicious transaction monitoring;

escalation procedures;

record keeping; and

employee training.

The objective is not simply to punish misconduct after it occurs.

An effective framework should prevent confidential information from reaching people who do not require it.

29. Digital Surveillance and Modern Banking

Electronic banking has increased the amount of information available for compliance monitoring.

Institutions can potentially identify suspicious patterns through:

order records;

access logs;

email metadata;

document-access histories;

employee trading records; and

transaction-monitoring systems.

However, surveillance must itself comply with applicable privacy, employment and data-protection rules.

The fact that technology makes extensive monitoring technically possible does not automatically make every form of monitoring legally permissible.

30. CNMV Enforcement and Sanctions

The CNMV's enforcement structure includes supervision, inspection and sanctioning powers under Law 6/2023. The legislation classifies certain breaches involving market abuse and insider-information controls as serious or very serious depending on their circumstances.

The CNMV also publicly records sanctions after the relevant procedural requirements have been satisfied. Its sanctions register remained active in 2026.

Consequences can include substantial administrative penalties and other regulatory measures permitted by law.

Where conduct satisfies criminal-law requirements, separate criminal consequences may potentially arise.

31. Importance of Intent and Knowledge

Insider-dealing law does not reduce every trade made while a person happens to know confidential information to automatic criminal misconduct.

The precise legal test depends upon:

how information was obtained;

whether it qualifies legally as inside information;

whether the person possessed it at the relevant time;

the circumstances of the transaction;

applicable statutory exceptions or legitimate behaviours; and

whether the requirements for the particular administrative or criminal offence are satisfied.

Spector Photo Group remains particularly important when analysing the relationship between possession and use of inside information.

32. Administrative Enforcement Versus Criminal Liability

A useful distinction is:

Administrative market abuse

The CNMV investigates and sanctions infringements within its statutory competence.

Criminal insider dealing

Where the statutory requirements of Spanish criminal law are satisfied, conduct can enter the criminal-justice system.

Criminal proceedings involve stronger consequences and criminal procedural protections.

The same factual events can therefore raise difficult questions about coordination between regulatory and judicial authorities.

The European jurisprudence represented by Grande Stevens, Di Puma and Zecca, and DB v CONSOB is important in understanding those procedural boundaries.

33. Role of EU Law

Spain cannot design insider-trading enforcement entirely independently.

The framework combines:

European Union level

Market Abuse Regulation;

EU implementing legislation;

CJEU jurisprudence;

European supervisory coordination.

Spanish level

Law 6/2023;

CNMV supervision;

Spanish administrative procedure;

criminal law where applicable;

Spanish court review.

This multi-level structure means that CJEU judgments from cases originating in Belgium, Germany, France, Italy or another Member State can materially affect interpretation applied in Spain.

34. Important Cases Summarised

These cases are mainly European authorities rather than Spanish insider-trading judgments. They are relevant in Spain because Spanish market-abuse enforcement operates within EU law.

35. Practical Banking Example

Suppose Banco X is advising a listed technology company on a confidential takeover.

Twenty bank employees have access to the transaction.

The bank should identify who genuinely requires access, maintain appropriate insider records, restrict internal circulation of the documents and prevent inappropriate personal trading.

Assume Employee A nevertheless learns the target company's identity.

Employee A buys shares before announcement.

Employee A also tells Employee B that "something major" is going to happen.

Employee B purchases shares.

After the takeover becomes public, the price rises substantially.

An investigation could examine:

whether the takeover negotiations constituted inside information;

when that information became sufficiently precise;

when each employee obtained access;

whether A dealt while possessing it;

whether A unlawfully disclosed it;

whether B knew or should have understood the nature of the information; and

whether either person's transactions satisfy the relevant legal requirements for administrative or criminal liability.

This illustrates why insider-trading enforcement involves considerably more than proving that someone made money from a transaction.

36. Recent Position

As of September 2026, Spain's principal securities statute remains Law 6/2023 on Securities Markets and Investment Services, operating alongside the directly applicable EU Market Abuse Regulation. Spain's official consolidated Securities Market Code was updated as recently as 10 July 2026.

The CNMV remains the competent Spanish authority for MAR and continues maintaining enforcement and jurisprudence records.

37. Conclusion

Banking Law and Insider Trading Enforcement in Spain is governed by an integrated Spanish and European legal framework.

The central rules come from the EU Market Abuse Regulation (MAR) together with Spain's Law 6/2023 on Securities Markets and Investment Services. The CNMV is the principal Spanish authority responsible for administering and enforcing the market-abuse regime.

For banks, insider-trading risk is particularly significant because financial institutions routinely receive confidential information concerning acquisitions, financing arrangements, capital transactions, client orders and other potentially price-sensitive events.

Effective compliance therefore requires more than simply telling employees not to trade. Banks need systems for identifying inside information, maintaining insider lists, restricting access, controlling employee transactions, supervising managers' dealings, monitoring suspicious activity and preserving relevant records.

European case law provides much of the authoritative interpretation applicable to Spain. Spector Photo Group, Geltl v Daimler, Lafonta, Georgakis, IMC Securities, Grande Stevens, Di Puma and Zecca, and DB v CONSOB collectively illustrate important principles concerning the definition and use of inside information, developing corporate events, market-abuse enforcement, evidentiary questions and procedural safeguards.

The fundamental principle is that persons who obtain privileged market information through banking, corporate or professional relationships must not obtain an unfair trading advantage from information that remains unavailable to the investing public. At the same time, enforcement must respect the evidentiary requirements and procedural protections established by Spanish and European law.