Roularta Media Group – €50,000 Fine (Belgium, 2022)

€50,000Autorité de Protection des Données25 May 2022Belgium
final
Fine

Roularta Media Group was fined for using pre-ticked boxes and placing cookies on users' devices before getting their consent. This matters because it shows that companies must be clear and honest about cookie usage and respect users' choices. Website operators should ensure they get proper consent before using cookies.

What happened

Roularta Media Group placed non-essential cookies on users' devices before obtaining consent.

Who was affected

Website visitors whose data was collected through cookies without their consent.

What the authority found

The authority found that Roularta violated GDPR rules by not obtaining valid consent for cookie usage.

Why this matters

This ruling emphasizes the importance of clear consent mechanisms for cookies. Other companies should review their practices to avoid similar penalties.

GDPR Articles Cited

Art. 12(GDPR)
Art. 13(GDPR)
Art. 14(GDPR)
Art. 24(GDPR)
Art. 5(1)(e) GDPR
Art. 5(2) GDPR
Art. 6(1)(a) GDPR
Art. 7(1) GDPR
Full Legal Summary
Detailed

The Belgian DPA has imposed a fine of EUR 50,000 on Roularta Media Group. As part of its investigation, the DPA found that the cookie management on two websites operated by Roularta did not comply with the GDPR. In order to use cookies, controllers must obtain prior consent from the user, except in cases where the cookies are strictly necessary for website operation. The DPA found that consent to the processing of personal data through cookies on websites operated by Roularta was not valid, as not all necessary conditions were met. As such, about 60 cookies that were not required had been placed by the websites on visitors' devices even before they had given their consent. Roularta had also failed to sufficiently inform users about cookies. In addition, the boxes for consent to the placement of cookies by third parties were checked in advance, although users must always actively consent. In addition, the DPA found that users could not revoke their consent to cookie placement as easily as they had given it.

Violations (5)

Pre-ticked Consent Boxes
high

Cookie consent checkboxes are pre-selected by default, violating the requirement for active, affirmative consent.

Art. 4(11) GDPR

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Third-Party Cookies Without Consent
critical

Third-party tracking cookies or scripts are loaded without obtaining prior user consent.

Art. 13, 14 GDPR

Unclear Cookie Information
high

The cookie banner or cookie policy provides vague, incomplete, or unclear information about what cookies are used and why.

Art. 12, 13 GDPR

Cannot Withdraw Cookie Consent
critical

No accessible mechanism exists for users to withdraw previously given cookie consent.

Art. 7(3) GDPR

Related Enforcement Actions (0)

No other enforcement actions found for Roularta Media Group in BE

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

25 May 2022

Authority

Autorité de Protection des Données

Fine Amount

€50,000

Enforcement Tracker ID

ETid-1191

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0

Cite as: Cookie Fines. Roularta Media Group - Belgium (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: