Cookie Consent Fines & Enforcement Actions

Browse European DPA enforcement actions targeting cookie consent and ePrivacy violations. Filter fines, warnings, and orders by country, violation type, and fine amount.

Selected coverage: Europe. Only published cases are included.

Updated daily
Publication coverage

Only published cases appear here. Worldwide publications remain under source review, including completed assessments.

Type: Fines

109 results · Showing 1–25

Page 1 of 5
INFINITE STYLES SERVICES CO. LIMITED
€150.0M
Sept 2025·Cookies Placed Before Consent
MLU B.V.
€100.0M
Apr 2026
Google Ireland Ltd
€100.0M
Dec 2020·Cookies Placed Before Consent
Microsoft Ireland Operations Limited
€60.0M
Dec 2022·Cookies Placed Before Consent
Orange
€50.0M
Nov 2024·Cookies Persist After Rejection
Amazon Europe Core
€35.0M
Dec 2020·Cookies Placed Before Consent
Enel Energia Spa
€26.5M
Dec 2021
OpenAI
€15.0M
Dec 2024
Avast Software, s.r.o.
€14.0M
Apr 2024
Poste Italiane S.p.a.
€12.5M
Apr 2026
Yahoo EMEA Limited
€10.0M
Dec 2023·Cookies Placed Before Consent
Apple Distribution
€8.0M
Dec 2022·Pre-ticked Consent Boxes
TikTok
€5.0M
Dec 2022·Reject Harder Than Accept
Acea Energia SPA
€3.0M
Apr 2025
VOODOO (the controller)
€3.0M
Dec 2022·Cookies Persist After Rejection
Lusha Systems Inc.
€2.0M
Jul 2026
American Express Carte France
€1.5M
Nov 2025
Douglas Italia S.p.a.
€1.4M
Oct 2022
Bonnier News AB
€1.1M
Jun 2023
Tele2 Sverige
€1.1M
Jun 2023
E.ON Energia
€893K
Nov 2024
LES PUBLICATIONS CONDE NAST
€750K
Nov 2025·Cookies Placed Before Consent
Vodafone
€740K
Jun 2025
Dutch Minister of Foreign Affairs
€565K
Feb 2022·Cookies Placed Before Consent
Enel Energia S.p.a.
€563K
Mar 2026
Page 1 of 5 (109 results)

Frequently Asked Questions About Cookie Enforcement

Q:What are the most common cookie consent violations in Europe?

The most common violations include setting cookies before obtaining user consent, using pre-ticked consent boxes, lacking a clear reject button on cookie banners, making it harder to refuse cookies than to accept them, and failing to provide adequate information about cookie purposes. The French CNIL and Italian Garante have been particularly active in enforcing these requirements.

Q:Which European countries issue the most cookie consent fines?

France (CNIL), Italy (Garante), and Spain (AEPD) consistently lead in cookie consent enforcement. France has issued some of the largest fines, including multi-million euro penalties against major tech companies for cookie consent violations under both GDPR and the ePrivacy Directive.

Q:What is the average cookie consent fine in Europe?

Cookie consent fines vary enormously, from a few thousand euros for small businesses to hundreds of millions for large tech companies. The median fine for cookie-specific violations tends to be lower than general GDPR fines, but landmark cases like CNIL's fines against Google and Amazon have reached EUR 150 million and EUR 35 million respectively.

Q:What laws govern cookie consent in Europe?

Cookie consent in Europe is governed primarily by the ePrivacy Directive (2002/58/EC, as amended by 2009/136/EC), often called the 'Cookie Directive', and the GDPR (Regulation 2016/679). Article 5(3) of the ePrivacy Directive requires prior consent for storing cookies, while GDPR Articles 6 and 7 define lawful consent requirements. National implementations vary by country.

Browse case links on this page

Cookie Consent Enforcement Actions (109 total)