Banking Law and Insurance Authority Supervision in Spain

1. Introduction

Banking law and insurance supervision in Spain are separate regulatory fields, but they frequently interact. Spanish banks often distribute insurance products, own interests in insurance companies, participate in financial conglomerates, provide financing to insurers, and sell insurance alongside mortgages and consumer credit.

The principal Spanish insurance supervisory authority is the Dirección General de Seguros y Fondos de Pensiones (DGSFP).

The principal statutory framework is Law 20/2015 of 14 July on the Organisation, Supervision and Solvency of Insurance and Reinsurance Undertakings. It operates alongside Spanish implementing legislation and European Union insurance law, particularly the Solvency II framework.

The basic regulatory structure can be expressed as:

Insurance and Reinsurance → DGSFP

Banking Prudential Supervision → Banco de España + European Central Bank

Securities Markets → CNMV

These authorities may need to cooperate where banking, insurance and investment activities exist within the same financial group.

2. Purpose of Insurance Supervision

Insurance supervision is necessary because insurance companies receive premiums today in return for promises to make payments when insured events occur in the future.

The insurer must therefore remain financially capable of fulfilling its obligations.

The supervisory system seeks to protect:

policyholders;

insured persons;

beneficiaries;

injured third parties;

financial stability; and

confidence in the insurance market.

Insurance supervision is consequently both prudential and conduct-oriented.

Prudential supervision examines the financial strength of insurers.

Conduct supervision examines how insurers and distributors behave toward customers.

3. Law 20/2015

Law 20/2015 is central to Spain's modern insurance supervisory framework.

It regulates matters including:

authorisation of insurers;

solvency requirements;

governance;

supervisory powers;

insurance groups;

financial deterioration;

regulatory intervention;

portfolio transfers;

structural transactions; and

withdrawal of authorisation.

The legislation incorporates major elements of the European Solvency II system into Spanish law.

The basic objective is preventive supervision.

The regulator should identify serious weaknesses before an insurer reaches a point where it cannot satisfy policyholders.

4. DGSFP as Insurance Supervisor

The DGSFP performs extensive supervisory functions.

These include:

examining insurers' financial information;

monitoring solvency;

assessing regulatory compliance;

inspecting insurance undertakings;

reviewing governance;

supervising insurance groups;

monitoring insurance distribution;

supervising market conduct;

reviewing financial deterioration;

protecting policyholders administratively; and

coordinating with European and foreign supervisory authorities.

Therefore, the DGSFP is not simply an insurance-registration authority.

It conducts continuing supervision throughout the life of an insurance undertaking.

5. Difference Between Banking and Insurance Supervision

Banks and insurers have different business models.

A bank commonly:

accepts deposits → provides credit → manages liquidity and credit risk.

An insurer commonly:

receives premiums → assumes insured risks → pays claims when insured events occur.

Consequently, their prudential rules are different.

Banks operate under banking capital, liquidity and prudential frameworks.

Insurance companies operate principally under the Solvency II insurance framework.

Nevertheless, the two systems interact where a financial group contains both banks and insurers.

6. Banco de España and ECB

The Banco de España performs important national banking supervisory functions.

Within the euro area's Single Supervisory Mechanism, the European Central Bank directly supervises significant banking institutions and works with national competent authorities.

The ECB and Banco de España should therefore not be confused with the DGSFP.

A simplified distinction is:

DGSFP = insurance supervision

Banco de España/ECB = banking prudential supervision

However, regulatory cooperation becomes important where banking and insurance risks overlap.

7. Bancassurance

Bancassurance is one of the strongest links between banking and insurance law.

It refers broadly to insurance distributed through banking channels.

A Spanish bank may distribute:

life insurance;

home insurance;

payment-protection insurance;

mortgage-related insurance;

accident insurance; and

savings or investment-linked insurance products.

The fact that an insurance policy is sold inside a bank does not convert it into an ordinary banking product.

Insurance-distribution requirements remain applicable.

8. Insurance Connected With Mortgages

Insurance supervision becomes particularly important where insurance is offered together with mortgage lending.

For example:

Bank

↓

Mortgage

Home insurance

Life insurance

Payment-protection insurance

Customers should be able to understand which products are required, which are optional, what each product costs, what risks are covered and what important exclusions apply.

This is an area where banking law, insurance law and consumer law interact directly.

9. Credit Protection Insurance

Credit-protection insurance is intended to cover specified repayment risks under defined circumstances.

Such insurance can be particularly sensitive because customers may incorrectly assume that virtually every inability to repay a loan is covered.

In reality, coverage depends on the policy.

Important matters include:

insured events;

exclusions;

waiting periods;

benefit limits;

duration;

premiums; and

termination conditions.

Supervisory authorities therefore pay particular attention to product design, distribution and customer information.

10. Solvency II

The EU Solvency II regime forms the foundation of modern insurance prudential regulation in Spain.

It is usually explained through three pillars.

Pillar 1 — Financial Requirements

This covers matters including:

valuation of assets;

valuation of liabilities;

technical provisions;

own funds;

Solvency Capital Requirement; and

Minimum Capital Requirement.

Pillar 2 — Governance and Risk Management

This covers:

governance;

internal control;

risk management;

actuarial function;

compliance;

internal audit; and

supervisory review.

Pillar 3 — Reporting and Disclosure

Insurers must provide extensive information to supervisors and make specified information publicly available.

Together, the three pillars create a risk-based supervisory framework.

11. Solvency Capital Requirement

The Solvency Capital Requirement (SCR) represents an important risk-based capital requirement.

The calculation takes account of material risks faced by the insurer.

These may include:

underwriting risk;

market risk;

counterparty risk;

operational risk; and

other relevant risks.

The purpose is to connect regulatory capital more closely with the insurer's actual risk profile.

12. Minimum Capital Requirement

The Minimum Capital Requirement (MCR) represents another important regulatory threshold.

Failure to maintain required capital can result in supervisory intervention.

The regulatory process may therefore develop as:

financial deterioration

↓

supervisory investigation

↓

recovery measures

↓

stronger intervention

↓

potential withdrawal of authorisation where legally required.

This preventive structure protects policyholders before an insurer becomes completely unable to perform its obligations.

13. Technical Provisions

Insurance companies must maintain appropriate technical provisions for their expected insurance obligations.

An insurer cannot simply treat collected premiums as unrestricted profits.

It must recognise liabilities associated with future claims.

Supervision therefore examines whether liabilities have been appropriately valued.

Incorrect valuation can make an insurer appear financially stronger than it really is.

14. Corporate Governance

Law 20/2015 and Solvency II place substantial importance on governance.

An insurer should maintain an effective governance structure containing appropriate:

management responsibilities;

risk management;

compliance;

actuarial functions;

internal audit;

internal controls; and

reporting systems.

The board and senior management remain responsible for ensuring that the undertaking is properly managed.

15. Fit and Proper Requirements

Persons who effectively manage an insurance undertaking or perform important functions must satisfy applicable suitability requirements.

Relevant considerations include:

professional qualifications;

experience;

knowledge;

competence;

integrity; and

reputation.

This resembles banking supervision, where senior management suitability is also an important prudential concern.

16. Own Risk and Solvency Assessment

The Own Risk and Solvency Assessment (ORSA) requires insurers to examine their own risk profile and solvency requirements.

It asks a broader question than simply whether statutory formulas have been satisfied.

The insurer must consider whether its financial resources are appropriate for the risks generated by its actual business.

ORSA therefore supports forward-looking supervision.

17. Stress Testing

Insurance supervisors may also examine how insurers could perform under adverse circumstances.

Examples might include:

severe financial-market declines;

substantial increases in claims;

natural catastrophes;

interest-rate changes;

credit deterioration; and

operational disruptions.

Stress analysis helps determine whether an insurer could continue satisfying obligations under difficult conditions.

18. Group Supervision

Supervision cannot always stop at the level of an individual insurer.

Large insurers may operate through complex corporate groups.

Group supervision may therefore consider:

consolidated solvency;

intra-group transactions;

risk concentrations;

governance;

group capital; and

relationships among subsidiaries.

The DGSFP may act as group supervisor where the statutory conditions are satisfied.

19. Financial Conglomerates

A financial conglomerate may contain:

Bank

Insurance company

Investment firm

under a common group structure.

Such arrangements create additional regulatory risks.

These include:

contagion;

conflicts of interest;

concentration risk;

intra-group exposures;

double use of capital; and

regulatory arbitrage.

Supplementary supervision helps regulators understand risks across the entire financial group.

20. Double Gearing

Double gearing occurs where the same capital is effectively relied upon more than once within a financial group.

For example:

Parent company capital

↓

supports Bank

and simultaneously

↓

supports Insurance Company.

This could exaggerate the group's real financial strength.

Financial-conglomerate supervision therefore seeks to identify whether capital is genuinely available to absorb losses.

21. Insurance Distribution

Insurance distribution is itself regulated.

The rules can apply to:

insurance companies selling directly;

insurance agents;

brokers;

bancassurance operators; and

other regulated distributors.

Distribution rules seek to ensure that customers receive appropriate information and that products are sold consistently with regulatory requirements.

This is especially important for banks because a bank employee may simultaneously interact with customers concerning loans and insurance products.

22. Product Governance

Insurance distributors and manufacturers must consider how products are designed and distributed.

Product-governance arrangements may address:

target market;

customer characteristics;

customer needs;

distribution strategy;

product risks; and

product monitoring.

The basic objective is:

design appropriate product → identify appropriate customers → distribute responsibly → monitor outcomes.

23. Conflicts of Interest

Bancassurance arrangements can create conflicts of interest.

A bank may receive commissions or other commercial benefits from insurance distribution.

This creates a risk that financial incentives influence how products are presented to customers.

Financial institutions therefore need systems for identifying, preventing or managing conflicts according to applicable requirements.

24. Insurance-Based Investment Products

Certain insurance contracts contain an investment component.

These can be more complex than traditional insurance because the customer may simultaneously face:

insurance risk;

investment risk;

market risk;

fees;

surrender conditions; and

long-term contractual commitments.

Banks distributing such products should clearly distinguish them from ordinary deposits.

An investment-linked insurance product should not be presented in a way that causes customers to misunderstand its legal or financial characteristics.

25. Consumer Protection

Insurance supervision is closely connected with consumer protection.

Important principles include:

transparency;

understandable information;

fair treatment;

appropriate claims handling;

complaint mechanisms;

clear contractual terms; and

disclosure of important exclusions.

The technical complexity of an insurance policy does not eliminate the need for customers to understand its essential economic consequences.

26. Outsourcing

Insurers increasingly outsource activities such as:

information technology;

cloud computing;

claims administration;

customer support;

cybersecurity;

analytics; and

data processing.

However:

outsourcing the activity does not automatically outsource regulatory responsibility.

The regulated insurance company remains responsible for satisfying applicable legal requirements.

27. Digital and Technology Supervision

Insurance supervision increasingly includes technological risks.

Important areas include:

cybersecurity;

operational resilience;

cloud concentration;

digital distribution;

artificial intelligence;

automated claims handling; and

third-party ICT providers.

These issues increasingly overlap with banking supervision because banks face similar technology-related operational risks.

28. Supervisory Inspection

The DGSFP has inspection and continuing supervisory functions.

Supervision may involve examination of:

accounting;

assets;

liabilities;

regulatory compliance;

risk;

solvency;

governance; and

insurance operations.

The purpose is to determine whether regulated entities continue satisfying legal requirements after authorisation.

29. Supervisory Measures

Where weaknesses are discovered, supervisory intervention may become progressively stronger.

Depending on the applicable statutory circumstances, measures may concern:

corrective action;

restoration of financial conditions;

governance deficiencies;

risk-management improvements;

restrictions;

special control measures; and

ultimately authorisation consequences.

Supervision is therefore intended to be preventive rather than merely punitive.

30. Relevant Case Law

Spanish insurance regulation is strongly influenced by European Union law.

Consequently, CJEU judgments are important for understanding insurance regulation and supervision in Spain.

The following cases illustrate important principles.

Case 1 — González Alonso v Nationale Nederlanden Vida, C-166/11

This case originated from Spain.

Ángel Lorenzo González Alonso entered into a unit-linked life-insurance arrangement with Nationale Nederlanden Vida.

The dispute reached the CJEU through a reference from the Audiencia Provincial de Oviedo.

Decision

The Court examined whether the contract fell within the scope of the EU rules governing contracts negotiated away from business premises.

It concluded that the life-assurance contract concerned fell within the insurance exclusion from the relevant directive.

Importance

The case demonstrates that insurance-based investment products retain their insurance-law character even where premiums are invested in financial instruments.

Banking Relevance

Banks distributing unit-linked insurance should therefore identify the correct legal classification of the product rather than treating it simply as an ordinary investment.

31. Case 2 — Van Hove v CNP Assurances, C-96/14

This case involved insurance designed to cover mortgage repayments where the borrower became unable to work.

A dispute arose concerning the meaning of the policy's incapacity provisions.

Decision

The CJEU considered the transparency requirements applicable under the Unfair Contract Terms Directive.

Principle

A contractual term must be sufficiently transparent for a consumer to understand its practical and economic consequences.

Banking Relevance

This is highly relevant to payment-protection and mortgage-related insurance sold through banks.

The existence of an insurance policy is not enough.

Customers should understand what circumstances actually trigger coverage.

32. Case 3 — Test-Achats, C-236/09

This major CJEU decision concerned the use of sex as a factor in determining insurance premiums and benefits.

Decision

The Court invalidated the indefinite derogation that permitted differences in premiums and benefits based on sex.

Principle

Insurance pricing must comply with applicable EU equal-treatment requirements.

Spanish Relevance

As Spain is an EU Member State, Spanish insurance regulation must operate consistently with this principle.

Banks distributing insurance must therefore ensure that products offered through banking channels comply with applicable equality requirements.

33. Case 4 — Nationale-Nederlanden Levensverzekering v Van Leeuwen, C-51/13

This case concerned information supplied to a policyholder regarding a life-insurance product.

Issue

The Court examined whether national law could require an insurer to provide information beyond specifically harmonised EU disclosure requirements.

Principle

Additional national information obligations may be possible under EU law where the applicable legal requirements are satisfied.

Importance

The judgment demonstrates the interaction between:

EU harmonisation

and

national consumer-protection requirements.

For Spanish banks distributing insurance, both European and Spanish disclosure requirements must therefore be considered.

34. Case 5 — Endress v Allianz Lebensversicherungs AG, C-209/12

This case concerned cancellation rights under a life-insurance contract where the policyholder had not received required information.

Principle

The effectiveness of consumer withdrawal rights can depend on whether legally required information was properly supplied.

Banking Relevance

Banks acting as insurance distributors should maintain reliable procedures demonstrating that customers receive the required contractual information.

Failure to provide required information can have consequences extending beyond the initial sale.

35. Case 6 — EEAE and Others, Joined Cases C-542/16 and C-543/16

These cases concerned the interpretation of European insurance-mediation rules.

Issue

The Court considered what kinds of activities fall within the concept of insurance mediation.

Principle

The actual nature of the activity matters when determining whether insurance-distribution regulation applies.

Banking Relevance

A bank or associated business cannot necessarily avoid insurance-distribution regulation merely by describing its activity using another commercial label.

Regulators examine what the institution actually does.

36. Case 7 — TC Medical Air Ambulance Agency, C-633/20

This case concerned the meaning of an insurance intermediary under EU insurance-distribution legislation.

Principle

The CJEU examined the commercial activity performed in connection with insurance coverage when determining whether insurance-distribution regulation applied.

Spanish Relevance

The judgment is useful for modern distribution models involving:

embedded insurance;

digital platforms;

subscription arrangements; and

non-traditional intermediaries.

Banks developing digital insurance partnerships must therefore consider whether the activities constitute regulated insurance distribution.

37. Case 8 — Verein für Konsumenteninformation v Amazon EU, C-191/15

Although this was not exclusively an insurance case, it is relevant to cross-border financial consumer contracts.

Principle

Businesses cannot use contractual choice-of-law arrangements in a misleading manner that causes consumers to misunderstand mandatory protections available to them.

Insurance Relevance

Modern insurance is increasingly distributed digitally across borders.

Spanish banks and insurers should therefore consider:

applicable law;

consumer protection;

jurisdiction;

disclosure; and

cross-border distribution requirements.

38. Importance of CJEU Case Law in Spain

The above cases are particularly relevant because Spain operates within the European Union legal system.

CJEU judgments interpreting EU insurance and consumer-protection legislation therefore influence how relevant EU rules must be understood in Spain.

However, not every CJEU judgment automatically determines every Spanish insurance dispute.

The result of an individual dispute depends upon:

the applicable EU legislation;

Spanish implementing legislation;

the contractual facts;

the period in which the contract was made; and

the questions actually before the court.

39. Cooperation With EIOPA

The European Insurance and Occupational Pensions Authority (EIOPA) supports supervisory convergence throughout the EU.

Its activities include:

technical standards;

guidelines;

supervisory coordination;

stress testing;

risk assessment; and

consumer-protection initiatives.

The DGSFP participates within this European supervisory structure.

EIOPA does not simply replace the Spanish national supervisor.

Instead:

EU coordination + national supervision = integrated European insurance supervision.

40. Cooperation With Other Spanish Authorities

The DGSFP may also need to cooperate with other Spanish financial authorities.

Banco de España

Relevant where insurance activities intersect with banking groups.

CNMV

Relevant where insurance products interact with securities or investment activities.

Other Authorities

Competition, consumer, data-protection and resolution authorities may become relevant depending upon the activity involved.

Modern financial supervision therefore requires institutional cooperation.

41. Practical Example

Suppose a Spanish banking group owns an insurance company and sells that insurer's life policies through its branches.

The regulatory structure may look like this:

Bank

Subject to banking supervision.

Insurance Subsidiary

Subject to insurance supervision by the DGSFP.

Insurance Distribution

Subject to insurance-distribution requirements.

Investment Component

Additional financial conduct requirements may become relevant depending on the product.

Financial Group

Group or financial-conglomerate supervision may apply.

Customer Data

EU and Spanish data-protection rules apply.

This demonstrates why a single financial product may involve several regulatory frameworks.

42. Compliance Requirements for Banks

Spanish banks participating in insurance distribution should maintain effective systems involving:

product classification;

regulatory authorisation;

staff training;

product governance;

customer disclosures;

conflicts-of-interest controls;

remuneration controls;

complaints procedures;

data protection;

record keeping;

operational resilience; and

monitoring of distribution practices.

Compliance should operate throughout the product lifecycle rather than only when the policy is initially sold.

43. Documentation

Good documentation is especially important in bancassurance.

Records may include:

policy documents;

applications;

customer disclosures;

premium information;

insurance needs assessments;

customer communications;

consent records;

cancellation information;

complaints; and

internal approvals.

These records can become important during supervisory investigations or litigation.

44. Core Legal Principles

The Spanish system can be summarised through eight principles.

Principle 1 — Separate Sectoral Regulation

Banking and insurance are distinct regulated sectors.

Principle 2 — DGSFP Supervision

The DGSFP is Spain's central administrative authority for insurance and reinsurance supervision within its statutory competence.

Principle 3 — Risk-Based Solvency

Insurance companies must maintain financial resources appropriate to their risks.

Principle 4 — Continuing Supervision

Regulatory supervision continues after authorisation.

Principle 5 — Consumer Protection

Policyholders must receive appropriate protection and information.

Principle 6 — Bancassurance Remains Insurance Distribution

Selling insurance through a bank does not remove insurance regulatory requirements.

Principle 7 — Group Risks Require Coordination

Bank-insurance groups can create contagion, concentration and capital-allocation risks requiring coordinated supervision.

Principle 8 — EU Law Is Fundamental

Spanish insurance regulation must be interpreted within the wider EU legal and supervisory framework.

Conclusion

Banking Law and Insurance Authority Supervision in Spain concerns the interaction between Spain's banking system and its insurance regulatory framework.

The Dirección General de Seguros y Fondos de Pensiones (DGSFP) performs central functions concerning insurance authorisation, solvency, governance, inspection, group supervision, insurance distribution and policyholder protection. Its principal domestic statutory framework is Law 20/2015, operating together with the European Solvency II system.

Banking law becomes directly relevant where banks distribute insurance, provide mortgage-related insurance, own insurance subsidiaries, participate in financial conglomerates or distribute insurance-based investment products.

The cases González Alonso v Nationale Nederlanden Vida (C-166/11), Van Hove v CNP Assurances (C-96/14), Test-Achats (C-236/09), Nationale-Nederlanden v Van Leeuwen (C-51/13), Endress v Allianz (C-209/12), EEAE (C-542/16 and C-543/16), TC Medical Air Ambulance (C-633/20), and VKI v Amazon (C-191/15) illustrate important European principles concerning insurance classification, contractual transparency, equality, disclosure, insurance distribution and consumer protection.

The central regulatory principle is:

Banks and insurers remain subject to distinct supervisory regimes, but where banking and insurance activities intersect, effective regulation requires coordinated prudential supervision, appropriate insurance distribution, financial resilience and strong consumer protection.