Company: BBVXF
Filing Date: 2025-08-12
Form Type: DRS
Source: 0000950123-25-007520
Chunk: 868

Company: BANCO BILBAO VIZCAYA ARGENTARIA, S.A.
Filing Date: 2025-08-12
Form: DRS
Chunk 868
---
   |

| – | Promoting a culture of compliance and appropriate conduct in each of the Group entities, adopting measures that will 
 enable employees to obtain the training and experience they need to perform their duties correctly.                  |

A-657

As confidentially submitted to the Securities and Exchange Commission on August 11, 2025. This Amendment No. 4 has not been publicly filed with the Securities and Exchange Commission and all information herein remains strictly confidential.

| – | Taking part in the development of training programmes in order to advise and make employees aware of the importance 
 of complying with the established internal procedures.                                                              |

| – | Advising on data protection through the Data Protection Office, acting as the point of contact with the Spanish Data                                
 Protection Agency (Agencia Española de Protección de Datos) and performing all other duties assigned in regulations to the Data Protection Officer. |

The following compliance risks have been identified:

| – | Anti-Money Laundering and Counter-Terrorist Financing. |

| – | Data protection. |

| – | Market integrity. |

| – | MiFID. |

| – | EBA. |

| – | Other products and services. |

| – | Publicity. |

| – | New legislation. |

| – | Corporate crime prevention. |

| – | Remuneration. |

| – | Code of Conduct and Ethics. |

| – | Subsidiaries and foreign branches. |

| – | Customer Care Service (Servicio de Atención al Cliente, or SAC). |

Note 5 – Minimum own funds and capital management Minimum own funds requirements The Group calculates minimum capital requirements based on Directive 2013/36/EU, amended by Directive 2019/878/EU (hereinafter, CRD-V),and Regulation (EU) 575/2013, amended by Regulation (EU) 2019/876 (hereinafter, CRR-II). Regulation CRR-IIand Directive CRD-IVentered into force on 27 June 2019 and have been implemented in successive stages since that date, although most of the provisions are applicable as from 28 June 2021. The Spanish government transposed Directive CRD-Vinto national law through Royal Decree-Law7/2021, of 27 April, Royal Decree 970/2021, of 8 November, and Circular 5/2021, of 22 December. The Covid-19health crisis prompted competent institutions in Europe to temporarily lower liquidity, capital