Mediafin – Complaint Upheld (Belgium, 2023)
Mediafin's cookie banner made it hard for users to refuse cookies. The company used misleading colors and didn't allow visitors to easily withdraw their consent. This matters because it shows the importance of clear consent options for website visitors.
What happened
Mediafin's cookie banner lacked a 'refuse all' option and made it difficult to withdraw consent.
Who was affected
Website visitors who encountered Mediafin's cookie banner were affected.
What the authority found
The authority found that Mediafin violated GDPR rules by not providing a clear option to reject cookies.
Why this matters
This case highlights the need for companies to create transparent cookie consent mechanisms. It sets a precedent that could lead to stricter requirements for cookie banners across Europe.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Entities Involved
Source checks
Linked-source text retrieved.
Review needed — 18 March 2026.
Processing notes: articles corrected, date discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
Mediafin's cookie banner lacked a 'refuse all' option, made rejecting cookies harder than accepting, and did not provide an easy way to withdraw consent.
Outcome
Complaint Upheld
A data subject complaint that was upheld by the DPA.
Violations (4)
Cookie banner does not provide a clear reject/refuse all button at the same level as the accept button.
Art. 7 GDPR
Refusing cookies requires more clicks or steps than accepting them, or the reject option is less visually prominent.
Art. 7 GDPR
The cookie banner uses misleading language to trick or pressure users into accepting cookies (dark patterns).
Art. 7 GDPR
No accessible mechanism exists for users to withdraw previously given cookie consent.
Art. 7(3) GDPR
Related Enforcement Actions (0)
No other enforcement actions found for Mediafin in BE
This is the only recorded action for this entity in this jurisdiction.
Similar Cases
Enforcement actions with similar violations
Details
Decision Date
24 November 2023
Authority
Autorité de Protection des Données
About this data
Cite as: Cookie Fines. Mediafin - Belgium (2023). Retrieved from cookiefines.eu
Last updated: