CaixaBank S.A. – Dismissed (Spain, 2023)
CaixaBank S.A. faced a complaint about its cookie banner, which made it harder for users to reject cookies than to accept them. This is important because it shows that companies must make it easy for users to manage their cookie preferences. A confusing cookie banner can lead to trust issues with customers.
What happened
CaixaBank's cookie banner made rejecting cookies more difficult than accepting them.
Who was affected
Website visitors who interact with CaixaBank's online services.
What the authority found
The Spanish DPA found that CaixaBank's cookie consent mechanism was not user-friendly.
Why this matters
This ruling emphasizes that companies must prioritize user-friendly consent mechanisms. Businesses should review their cookie banners to ensure compliance with data protection rules.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 22 March 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The cookie banner made rejecting cookies more difficult than accepting them, and withdrawing consent was cumbersome.
Outcome
Dismissed
The complaint or investigation was dismissed.
Violations (3)
Refusing cookies requires more clicks or steps than accepting them, or the reject option is less visually prominent.
Art. 7 GDPR
Third-party tracking cookies or scripts are loaded without obtaining prior user consent.
Art. 13, 14 GDPR
No accessible mechanism exists for users to withdraw previously given cookie consent.
Art. 7(3) GDPR
Related Enforcement Actions (0)
No other enforcement actions found for CaixaBank S.A. in ES
This is the only recorded action for this entity in this jurisdiction.
Similar Cases
Enforcement actions with similar violations
Details
Decision Date
11 October 2023
Authority
Agencia Española de Protección de Datos
About this data
Cite as: Cookie Fines. CaixaBank S.A. - Spain (2023). Retrieved from cookiefines.eu
Last updated: