Posti Jakelu Oy – €2,400,000 Fine (Finland, 2024)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The Finnish DPA imposed a fine of EUR 2.4 million on Posti Jakelu Oy following an investigation. It was found that Posti had automatically set up an electronic mailbox for customers without their explicit consent. This mailbox was connected to other services, and customers were unable to choose whether to use it, as the services were bundled together in a single contract. Canceling the mailbox would also have resulted in the termination of the other services. The DPA determined that the requested service could have been offered without the automatic creation of the electronic mailbox. Furthermore, Posti failed to properly inform customers about the activation of the mailbox.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The Finnish DPA imposed a fine of EUR 2.4 million on Posti Jakelu Oy following an investigation. It was found that Posti had automatically set up an electronic mailbox for customers without their explicit consent. This mailbox was connected to other services, and customers were unable to choose whether to use it, as the services were bundled together in a single contract. Canceling the mailbox would also have resulted in the termination of the other services. The DPA determined that the requested service could have been offered without the automatic creation of the electronic mailbox. Furthermore, Posti failed to properly inform customers about the activation of the mailbox.
Violations (2)
Cookie consent checkboxes are pre-selected by default, violating the requirement for active, affirmative consent.
Art. 4(11) GDPR
The cookie banner uses misleading language to trick or pressure users into accepting cookies (dark patterns).
Art. 7 GDPR
Related Enforcement Actions (0)
No other enforcement actions found for Posti Jakelu Oy in FI
This is the only recorded action for this entity in this jurisdiction.
Similar Cases
Enforcement actions with similar violations
Website operator
2023 · Agencia Española de Protección de Datos
Roularta Media Group
2022 · Autorité de Protection des Données
Apple Distribution
2022 · Commission Nationale de l'Informatique et des Libertés
BANKIA, S.A.
2021 · Agencia Española de Protección de Datos
Court case 490202
2025 · DPA CE
Details
Fine Date
13 November 2024
Authority
DPA Tietosuojavaltuutetu
Fine Amount
€2,400,000
Enforcement Tracker ID
ETid-2544
GDPRhub ID
gdprhub-8627About this data
Cite as: Cookie Fines. Posti Jakelu Oy - Finland (2024). Retrieved from cookiefines.eu
Last updated: