Cookie Consent Fines & Enforcement Actions

Browse European DPA enforcement actions targeting cookie consent and ePrivacy violations. Filter fines, warnings, and orders by country, violation type, and fine amount.

Selected coverage: Europe. Only published cases are included.

Updated daily
Publication coverage

Only published cases appear here. Worldwide publications remain under source review, including completed assessments.

Type: Violation Found

33 results · Showing 1–25

Page 1 of 2
DPA case 10139147
—
Apr 2025·Violation·Unclear Cookie Information
DPA case 07121-1/2020/1570
—
Sept 2020·Violation
Myndoor S.r.l.
—
May 2026·Violation
Lepus Asset Management Oy
—
Mar 2026·Violation
Amazon Italia Logistica s.r.l.
—
Feb 2026·Violation
Dream Land S.r.l.
—
Dec 2025·Violation
Squeezemind S.r.l.
—
Oct 2025·Violation·Misleading Banner Messaging
Centralcar S.p.a.
—
Jun 2025·Violation·No Reject Button
Confalonieri S.r.l.
—
Jun 2025·Violation·No Reject Button
Norsk Helseinformatikk AS
—
Jun 2025·Violation·Reject Harder Than Accept
Società Onlinestore s.r.l.
—
Oct 2024·Violation·No Reject Button
Freedelity
—
Nov 2024·Violation
Azienda Ospedaliero Universitaria Città della Salute e della Scienza di Torino
—
Oct 2023·Violation
Mrs XX - natural person
—
Oct 2023·Violation
Google LLC
—
Jul 2023·Violation
Istituto Nazionale di Statistica
—
Jun 2023·Violation
Ilmatieteenlaitos
—
Apr 2023·Violation
City of Helsinki
—
Dec 2022·Violation·Cookies Placed Before Consent
JP/Politikens Hus A/S
—
Oct 2022·Violation·Misleading Banner Messaging
G.O.L. Impresa Sociale S.r.l.
—
Apr 2022·Violation
Pago PA S.p.A
—
Jun 2021·Violation·Third-Party Cookies Without Consent
GOOGLE LLC
—
Apr 2021·Violation
TikTok
—
Mar 2021·Violation
Defendant : Westtoer APB a public entity giving autonomous services in the area of tourism in the province of West -Flanders.
—
Feb 2021·Violation
CNIL
—
Mar 2026·Violation
Page 1 of 2 (33 results)

Frequently Asked Questions About Cookie Enforcement

Q:What are the most common cookie consent violations in Europe?

The most common violations include setting cookies before obtaining user consent, using pre-ticked consent boxes, lacking a clear reject button on cookie banners, making it harder to refuse cookies than to accept them, and failing to provide adequate information about cookie purposes. The French CNIL and Italian Garante have been particularly active in enforcing these requirements.

Q:Which European countries issue the most cookie consent fines?

France (CNIL), Italy (Garante), and Spain (AEPD) consistently lead in cookie consent enforcement. France has issued some of the largest fines, including multi-million euro penalties against major tech companies for cookie consent violations under both GDPR and the ePrivacy Directive.

Q:What is the average cookie consent fine in Europe?

Cookie consent fines vary enormously, from a few thousand euros for small businesses to hundreds of millions for large tech companies. The median fine for cookie-specific violations tends to be lower than general GDPR fines, but landmark cases like CNIL's fines against Google and Amazon have reached EUR 150 million and EUR 35 million respectively.

Q:What laws govern cookie consent in Europe?

Cookie consent in Europe is governed primarily by the ePrivacy Directive (2002/58/EC, as amended by 2009/136/EC), often called the 'Cookie Directive', and the GDPR (Regulation 2016/679). Article 5(3) of the ePrivacy Directive requires prior consent for storing cookies, while GDPR Articles 6 and 7 define lawful consent requirements. National implementations vary by country.

Browse case links on this page

Cookie Consent Enforcement Actions (33 total)