Multiple website operators – €178,000 Fine (Czech Republic, 2023)
Multiple website operators in the Czech Republic were fined for not properly handling user consent for cookies. They failed to give users clear options to accept or reject cookies, which is required by data protection laws. This case shows that companies must ensure they have proper consent mechanisms in place.
What happened
Website operators were fined for not providing clear cookie consent options and for placing cookies before obtaining consent.
Who was affected
Website visitors who were tracked by cookies without proper consent.
What the authority found
The authority determined that the website operators unlawfully processed personal data by not having a valid legal basis for their cookie practices.
Why this matters
This ruling highlights the importance of having clear and accessible consent options for cookies. Website operators should review their cookie policies to avoid similar penalties.
In the period from January 2023 to July 2023, the Czech DPA imposed fines totaling EUR 178,000, with the highest fine being EUR 36,000. These fines were imposed due to unlawful processing of personal data in relation to cookies. The types of violations vary. Given examples are: Insufficient legal basis, insufficient compliance with information obligations or design issues. The DPA emphasizes that it will not publish individual fines due to the non-public nature of administrative proceedings.
Violations (5)
Cookie banner does not provide a clear reject/refuse all button at the same level as the accept button.
Art. 7 GDPR
Refusing cookies requires more clicks or steps than accepting them, or the reject option is less visually prominent.
Art. 7 GDPR
Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.
Art. 6(1) GDPR
The cookie banner or cookie policy provides vague, incomplete, or unclear information about what cookies are used and why.
Art. 12, 13 GDPR
Users cannot select or deselect individual cookie categories; consent is presented as all-or-nothing.
Art. 4(11) GDPR
Related Enforcement Actions (0)
No other enforcement actions found for Multiple website operators in CZ
This is the only recorded action for this entity in this jurisdiction.
Similar Cases
Enforcement actions with similar violations
Details
Fine Date
2 August 2023
Authority
Úřad pro ochranu osobních údajů
Fine Amount
€178,000
Enforcement Tracker ID
ETid-2592
About this data
Cite as: Cookie Fines. Multiple website operators - Czech Republic (2023). Retrieved from cookiefines.eu
Last updated: