Cookie Consent Fines & Enforcement Actions

Browse European DPA enforcement actions targeting cookie consent and ePrivacy violations. Filter fines, warnings, and orders by country, violation type, and fine amount.

Selected coverage: Europe. Only published cases are included.

Updated daily
Publication coverage

Only published cases appear here. Worldwide publications remain under source review, including completed assessments.

Authority: AEPD
Country: Spain

25 results · Showing 1–25

Tiger Media Inc.
€72K
Nov 2025·Cookies Placed Before Consent
IBERIA LÍNEAS AÉREAS DE ESPAÑA, S.A. OPERADORA UNIPERSONAL
€30K
Oct 2020·No Reject Button
vodafone
€20K
Mar 2025
Supervista Optics Spain
€20K
Sept 2024
The Nude Project
€20K
Sept 2024
D.A.A.A
€18K
Oct 2019·Pre-ticked Consent Boxes
Ramona Films, S.L.
€8K
Jan 2022·No Reject Button
Asociación de Víctimas por Arbitrariedades Judiciales (JAVA)
€8K
Nov 2020·No Reject Button
Wallapop S.L.
€3K
May 2025·Cookies Persist After Rejection
EDICIONES CATÓLICOS Y VIDA PÚBLICA, S.L.U.
€3K
Jun 2025·Cookies Placed Before Consent
NATURAL LOGISTICS, S.L.
€3K
Aug 2021
The Royal Clinic by Doctor Marin
€2K
Nov 2020·Unclear Cookie Information
BEINNOVA.ES
€2K
Feb 2021
The Washpoint SL
€2K
Jan 2021·No Reject Button
Lia's Clothes
€2K
Jan 2022·Cookies Placed Before Consent
Solo Embrague
€2K
Mar 2020
Radio Popular S.A.
€1K
Jun 2021·No Reject Button
DPA case E/03379/2021
—
Apr 2021·Dismissed·Cookies Placed Before Consent
Mapfre España Compañia de Seguros y Reaseguros SA
—
Oct 2024·Complaint·Cookies Placed Before Consent
Adevinta Spain, S.L.
—
Apr 2024·Dismissed
Rights International Spain (RIS)
—
Jan 2022·No Violation
FACUA - Asociación de Consumidores y Usuarios en Acción
—
Jan 2021·Complaint·No Reject Button
Turner Broadcasting System España, S.L.
—
Mar 2024·Dismissed·No Reject Button
CaixaBank S.A.
—
Oct 2023·Dismissed·Reject Harder Than Accept
GLOBAL KAPITAL GROUP SPAIN, S.L
—
Aug 2023·Complaint

Frequently Asked Questions About Cookie Enforcement

Q:What are the most common cookie consent violations in Europe?

The most common violations include setting cookies before obtaining user consent, using pre-ticked consent boxes, lacking a clear reject button on cookie banners, making it harder to refuse cookies than to accept them, and failing to provide adequate information about cookie purposes. The French CNIL and Italian Garante have been particularly active in enforcing these requirements.

Q:Which European countries issue the most cookie consent fines?

France (CNIL), Italy (Garante), and Spain (AEPD) consistently lead in cookie consent enforcement. France has issued some of the largest fines, including multi-million euro penalties against major tech companies for cookie consent violations under both GDPR and the ePrivacy Directive.

Q:What is the average cookie consent fine in Europe?

Cookie consent fines vary enormously, from a few thousand euros for small businesses to hundreds of millions for large tech companies. The median fine for cookie-specific violations tends to be lower than general GDPR fines, but landmark cases like CNIL's fines against Google and Amazon have reached EUR 150 million and EUR 35 million respectively.

Q:What laws govern cookie consent in Europe?

Cookie consent in Europe is governed primarily by the ePrivacy Directive (2002/58/EC, as amended by 2009/136/EC), often called the 'Cookie Directive', and the GDPR (Regulation 2016/679). Article 5(3) of the ePrivacy Directive requires prior consent for storing cookies, while GDPR Articles 6 and 7 define lawful consent requirements. National implementations vary by country.

Browse case links on this page

Cookie Consent Enforcement Actions (25 total)