Company: BBVXF
Filing Date: 2025-09-05
Form Type: F-4/A
Source: 0001193125-25-196513
Chunk: 628

Company: BANCO BILBAO VIZCAYA ARGENTARIA, S.A.
Filing Date: 2025-09-05
Form: F-4/A
Chunk 628
---
 in accordance with the above, an                                                        
 up-to-date oversight and control programme, with the appropriate tools and methodologies for control. |

| – | Supervising the risk management activities carried out by the first line of defence to ensure that they are aligned 
 with the established policies and procedures.                                                                       |

| – | Conducting an appropriate follow-up on any findings (incidents, weakness or                                                                                
 areas for improvement detected in the Institution, which may have an impact on compliance risk), in accordance with the corresponding internal procedures. |

| – | Keeping, for at least the period of time established by the legislation in force at any given time, the documentary                                                                        
 justification of the controls carried out by the Compliance Division, as well as any other policies and procedures implemented for the best possible fulfilment of regulatory obligations. |

| – | Monitoring and coordinating inspections, as well as responses to the requirements of supervisors and regulators, and 
 checking that their recommendations have been acted on accordingly.                                                  |

| – | With regard to Anti-Money Laundering, Countering the Financing of Terrorism (AML/CFT) and International Sanctions,                                                                                                                                      
 implementing, managing and updating policies and procedures on the topic of AML/CFT and international sanctions; carrying out the preliminary classification of the AML/CFT risk of customers during the onboarding process; applying enhanced due      
 diligence measures when onboarding high-risk customers so that they may be accepted and duly updated beforehand; managing tracking alerts; detecting matches in lists of designated persons and transactions of countries subject to international      
 sanctions; performing special analyses of suspicious activities and reporting them as necessary; preparing training plans; approving new products, services, channels and business areas; and conducting a periodic risk assessment of internal control 
 procedures in relation to AML/CFT and international sanctions.                                                                                                                                                                                          |

| – | Advising on data protection through the Data Protection Office, acting as the point of contact with the Spanish Data                                
 Protection Agency (Agencia Española de Protección de Datos) and performing all other duties assigned in regulations to the Data Protection Officer. |

| – | Taking part in the process to formulate remuneration policies and practices. |

| – | Promoting a culture of compliance and appropriate conduct in each of the Group entities, adopting measures that will 
 enable employees to obtain the training and experience they need to perform their duties correctly.                  |

| – | Assigning functional responsibilities for compliance where necessary. |

| – | Collaborating in the development of training programmes in order to advise and make employees aware of the