Enforcing jurisdiction
European Union · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

DPA case 2020-1013 – Complaint Upheld (European Union, 2022)

Complaint Upheld
DPA5 January 2022European Union
final
ePrivacy
Complaint Upheld

The European Parliament's internal coronavirus testing website had unclear cookie banners and data protection notices. This matters because it shows that even government websites must clearly inform users about their data collection practices. Website operators should ensure their cookie policies are easy to understand.

What happened

The European Parliament's website had unclear cookie banners and data protection notices.

Who was affected

Visitors to the European Parliament's internal coronavirus testing website were affected.

What the authority found

The EDPS found that the website did not provide clear information about cookies, violating GDPR rules.

Why this matters

This case highlights the importance of transparency in data collection practices. Website operators should take care to provide clear and understandable cookie information to avoid similar issues.

Recorded legal citations
Automatically processed
Art. 15 GDPR
Art. 6(1)(f) GDPR
View original scraped data
Art. 6(GDPR)
Art. 13(GDPR)
Art. 5(3) ePrivacy Directive

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Secondary-source text retrieved.

Automated check recorded — 18 October 2026.

Processing notes: articles corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The European Parliament's internal coronavirus testing website had unclear cookie banners and data protection notices.

Outcome

Complaint Upheld

A data subject complaint that was upheld by the DPA.

Related Enforcement Actions (0)

No other enforcement actions found for DPA case 2020-1013 in EU

This is the only recorded action for this entity in this jurisdiction.

Details

Decision Date

5 January 2022

Authority

GDPRhub ID

gdprhub-4479

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. DPA case 2020-1013 - European Union (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: