The Financial Services Authority said HBOS's corporate division took too many risks from the start of 2006, leaving it vulnerable to the financial downturn.
Tracey McDermott, FSA acting director of enforcement, said:
"The conduct of the Bank of Scotland illustrates how a failure to meet regulatory requirements can end not just in massive costs to a firm, but losses to shareholders, taxpayers and the economy.
"Banks and other firms have to manage their business by ensuring that their systems and controls are appropriate for the risks that they are running."
More top news
Jamie Harron was arrested in July over an incident in which he said he put his hand on a man's hip to avoid spilling a drink in a bar.
Merrill Lynch has been fined £34.5 million for failing to report 68.5 million transactions, the Financial Conduct Authority has said.
Most people back a change in the law to ban unpaid internships that last for more than four weeks, a new poll suggests.