Company: BBVXF
Filing Date: 2025-09-09
Form Type: 424B3
Source: 0001193125-25-198517
Chunk: 621

Company: BANCO BILBAO VIZCAYA ARGENTARIA, S.A.
Filing Date: 2025-09-09
Form: 424B3
Chunk 621
---
 Spanish Data                                
 Protection Agency (Agencia Española de Protección de Datos) and performing all other duties assigned in regulations to the Data Protection Officer. |

| – | Taking part in the process to formulate remuneration policies and practices. |

| – | Promoting a culture of compliance and appropriate conduct in each of the Group entities, adopting measures that will 
 enable employees to obtain the training and experience they need to perform their duties correctly.                  |

| – | Assigning functional responsibilities for compliance where necessary. |

| – | Collaborating in the development of training programmes in order to advise and make employees aware of the importance 
 of complying with the established internal procedures.                                                                |

| – | Sharing relevant information, reviewing and proposing corrective measures and/or responses to incidents detected in                                                                                                                               
 matters of conduct or to queries submitted to the Corporate Ethics Committee, which is tasked with promoting the Group’s ethical conduct to ensure compliance with the action principles set out in the Banco Sabadell Group Code of Conduct, the 
 Banco Sabadell Group Internal Code of Conduct relating to the securities market, the Banco Sabadell Group General Policy on Conflicts of Interest, the Banco Sabadell Group Corporate Crime Prevention Policy and the Banco Sabadell Group        
 Anti-Corruption Policy.                                                                                                                                                                                                                           |

| – | Submitting to the administrative and management bodies the regular or ad hoc reports on compliance that are legally 
 required at any given time.                                                                                         |

| – | Reporting to the administrative and management bodies on any information relevant to compliance arising from all 
 areas and activities of each Group entity.                                                                       |

| – | Assisting the Board of Directors and Senior Management in compliance matters. |

| – | Taking on institutional responsibilities and interacting with supervisory authorities and institutions in relation to 
 matters within its remit and where agreed by the Institution’s management and administrative bodies.                  |

A-430

The following compliance risks have been identified:

| – | Anti-Money Laundering and Counter-Terrorist Financing. |

| – | Data protection. |

| – | Market integrity. |

| – | Customer protection (including the following risks: MiFID, EBA, other products and services, sustainability, 
 misconduct with customers and advertising).                                                                  |

| – | New legislation. |

| – | Ethics and conduct (includes risks related to corporate crime prevention, remuneration and the code of conduct and 
 ethics).                                                                                                           |

| – | Customer Care Service (Servicio de Atención al Cliente, or SAC). |

A