Regulatory Compliance

The Regulatory Compliance function in the Bankinter Group reports to the Risk and Compliance Committee of the Board of Directors and is part of Corporate Control and Compliance Division, with corporate responsibilities and providing support to the governing bodies. In 2025, the compliance risk measurement methodology was applied and monitored uniformly across all the second lines. This framework is supported by a strong culture of control, reinforced by the involvement of the Board of Directors and senior management, continuous and mandatory staff training, an incentive policy aligned with risk appetite and a robust whistleblowing channel.

Following the model based on the three lines of defence and guaranteeing the independence of the function, a structure appropriate to the principles and risk culture of the organisation has been implemented, integrating the different risks affecting banking activity, investment and insurance and ensuring their centralised management through a corporate structure with corporate-wide responsibility. In 2025, Bankinter developed the basic areas of regulatory compliance as a second line of defence around the following units:

• Control and advice on regulatory compliance issues in the areas of banking transparency and products, investment services, market abuse, the Internal Code of Conduct and conflicts of interest.
• Prevention of money laundering and terrorist financing.

These units participate in the Regulatory Compliance Committee, the Product and Operational Risk Committee, the Internal Control Body, the Agent Acceptance Committee, and the Money Laundering Prevention Area. Each of the subsidiaries and branches has its own risk control and management policies adapted to the specific regulations applicable in their country. As a general rule, all of the Group's employees receive mandatory training on matters related to AML every year.