Cookie Consent Fines & Enforcement Actions
Browse European DPA enforcement actions targeting cookie consent and ePrivacy violations. Filter fines, warnings, and orders by country, violation type, and fine amount.
Selected coverage: Europe. Only published cases are included.
94 results · Showing 51–75
Municipality of Thiene
an unnamed data subject
Ditta individuale Francesco Gagliardi
Istituto di Istruzione Superiore “G. Renda” di Polistena, Reggio Calabria
DPA case 10139147
Unclear Cookie Information
DPA case 9782890
Third-Party Cookies Without Consent
DPA case 9788429
Third-Party Cookies Without Consent
Myndoor S.r.l.
Enel Energia
Garante per la Protezione dei Dati Personali
Garante per la protezione dei dati personali
Amazon Italia Logistica s.r.l.
Dream Land S.r.l.
Squeezemind S.r.l.
Misleading Banner Messaging
Centralcar S.p.a.
No Reject Button · No Granular Cookie Choice +1
Confalonieri S.r.l.
No Reject Button · Unclear Cookie Information +1
G.Glamour
Unclear Cookie Information
Società Onlinestore s.r.l.
No Reject Button · Pre-ticked Consent Boxes +3
Maggioli S.p.A.
No Reject Button · Pre-ticked Consent Boxes
C.B. Sistemi s.r.l.
Editoriale Argo S.r.l.
Reti Televisive Italiane S.p.a.
Azienda Ospedaliero Universitaria Città della Salute e della Scienza di Torino
Mrs XX - natural person
Istituto Nazionale di Statistica
Frequently Asked Questions About Cookie Enforcement
Q:What are the most common cookie consent violations in Europe?
The most common violations include setting cookies before obtaining user consent, using pre-ticked consent boxes, lacking a clear reject button on cookie banners, making it harder to refuse cookies than to accept them, and failing to provide adequate information about cookie purposes. The French CNIL and Italian Garante have been particularly active in enforcing these requirements.
Q:Which European countries issue the most cookie consent fines?
France (CNIL), Italy (Garante), and Spain (AEPD) consistently lead in cookie consent enforcement. France has issued some of the largest fines, including multi-million euro penalties against major tech companies for cookie consent violations under both GDPR and the ePrivacy Directive.
Q:What is the average cookie consent fine in Europe?
Cookie consent fines vary enormously, from a few thousand euros for small businesses to hundreds of millions for large tech companies. The median fine for cookie-specific violations tends to be lower than general GDPR fines, but landmark cases like CNIL's fines against Google and Amazon have reached EUR 150 million and EUR 35 million respectively.
Q:What laws govern cookie consent in Europe?
Cookie consent in Europe is governed primarily by the ePrivacy Directive (2002/58/EC, as amended by 2009/136/EC), often called the 'Cookie Directive', and the GDPR (Regulation 2016/679). Article 5(3) of the ePrivacy Directive requires prior consent for storing cookies, while GDPR Articles 6 and 7 define lawful consent requirements. National implementations vary by country.
Browse case links on this page
Cookie Consent Enforcement Actions (94 total)
- Municipality of Thiene (Italy) – €3K – Sept 2022
- an unnamed data subject (Italy) – €3K – Apr 2022
- Ditta individuale Francesco Gagliardi (Italy) – €2K – May 2026
- Istituto di Istruzione Superiore “G. Renda” di Polistena, Reggio Calabria (Italy) – €900 – Oct 2022
- DPA case 10139147 (Italy) – violation found – Apr 2025 | Unclear Cookie Information
- DPA case 9782890 (Italy) – complaint upheld – Jun 2022 | Third-Party Cookies Without Consent
- DPA case 9788429 (Italy) – order – Jul 2022 | Third-Party Cookies Without Consent
- Myndoor S.r.l. (Italy) – violation found – May 2026
- Enel Energia (Italy) – court ruling – Feb 2023
- Garante per la Protezione dei Dati Personali (Italy) – court ruling – Sept 2023
- Garante per la protezione dei dati personali (Italy) – court ruling – Oct 2023
- Amazon Italia Logistica s.r.l. (Italy) – violation found – Feb 2026
- Dream Land S.r.l. (Italy) – violation found – Dec 2025
- Squeezemind S.r.l. (Italy) – violation found – Oct 2025 | Misleading Banner Messaging
- Centralcar S.p.a. (Italy) – violation found – Jun 2025 | No Reject Button, No Granular Cookie Choice, Unclear Cookie Information
- Confalonieri S.r.l. (Italy) – violation found – Jun 2025 | No Reject Button, Unclear Cookie Information, Misleading Banner Messaging
- G.Glamour (Italy) – complaint upheld – Nov 2024 | Unclear Cookie Information
- Società Onlinestore s.r.l. (Italy) – violation found – Oct 2024 | No Reject Button, Pre-ticked Consent Boxes, Cookies Persist After Rejection, Unclear Cookie Information, No Granular Cookie Choice
- Maggioli S.p.A. (Italy) – complaint upheld – Feb 2023 | No Reject Button, Pre-ticked Consent Boxes
- C.B. Sistemi s.r.l. (Italy) – complaint upheld – Nov 2023
- Editoriale Argo S.r.l. (Italy) – complaint upheld – Nov 2023
- Reti Televisive Italiane S.p.a. (Italy) – complaint upheld – Nov 2023
- Azienda Ospedaliero Universitaria Città della Salute e della Scienza di Torino (Italy) – violation found – Oct 2023
- Mrs XX - natural person (Italy) – violation found – Oct 2023
- Istituto Nazionale di Statistica (Italy) – violation found – Jun 2023