Cookie Consent Fines & Enforcement Actions

Browse European DPA enforcement actions targeting cookie consent and ePrivacy violations. Filter fines, warnings, and orders by country, violation type, and fine amount.

Selected coverage: Europe. Only published cases are included.

Updated daily
Publication coverage

Only published cases appear here. Worldwide publications remain under source review, including completed assessments.

227 results · Showing 26–50

Page 2 of 10
Gennaro Sangiuliano
€150K
Oct 2025
Individuals
€150K
Jul 2022
Cityscoot
€125K
Mar 2023·No Reject Button
NS Cards France
€105K
Dec 2023·Cookies Placed Before Consent
Tiscali Italia S.p.A.
€100K
Jul 2023
Regione di Veneto (the Controller)
€100K
Oct 2022
GFB One s.r.l.
€90K
Sept 2023
CALOGA
€80K
May 2025·Misleading Banner Messaging
Azienda Ospedale - Università Padova
€75K
May 2024
Tiger Media Inc.
€72K
Nov 2025·Cookies Placed Before Consent
Scionti Selezioni Superiori S.r.l.
€70K
Oct 2023
Limit Call S.r.l.s.
€60K
Nov 2023
Trasporto Passeggeri Emilia-Romagna S.p.A. (TPER)
€50K
Feb 2024
Rossel Group (sudinfo)
€50K
Jun 2022·Cookies Placed Before Consent
Roularta Media Group
€50K
May 2022·Cookies Placed Before Consent
Amazon Italia Transport s.r.l.
€40K
Nov 2023
T.S.M. Srl.
€40K
Jan 2022
Volkswagen Leasing GmbH
€40K
Aug 2021
Comune di Bologna
€40K
Apr 2025
Sportitalia Società Sportiva Dilettantistica a.r.l.
€30K
Feb 2026
Policlinico Casilino di Roma (the controller)
€30K
Oct 2022
Rossi Carta S.r.l. Unipersonale
€30K
Apr 2024
TV2 Média Csoport Zrt.
€25K
Jan 2023·Reject Harder Than Accept
Kristiansand Municipality
€22K
Mar 2025·Third-Party Cookies Without Consent
Cooperativa Quadrifoglio s.c. Onlus
€20K
Apr 2025
Page 2 of 10 (227 results)

Frequently Asked Questions About Cookie Enforcement

Q:What are the most common cookie consent violations in Europe?

The most common violations include setting cookies before obtaining user consent, using pre-ticked consent boxes, lacking a clear reject button on cookie banners, making it harder to refuse cookies than to accept them, and failing to provide adequate information about cookie purposes. The French CNIL and Italian Garante have been particularly active in enforcing these requirements.

Q:Which European countries issue the most cookie consent fines?

France (CNIL), Italy (Garante), and Spain (AEPD) consistently lead in cookie consent enforcement. France has issued some of the largest fines, including multi-million euro penalties against major tech companies for cookie consent violations under both GDPR and the ePrivacy Directive.

Q:What is the average cookie consent fine in Europe?

Cookie consent fines vary enormously, from a few thousand euros for small businesses to hundreds of millions for large tech companies. The median fine for cookie-specific violations tends to be lower than general GDPR fines, but landmark cases like CNIL's fines against Google and Amazon have reached EUR 150 million and EUR 35 million respectively.

Q:What laws govern cookie consent in Europe?

Cookie consent in Europe is governed primarily by the ePrivacy Directive (2002/58/EC, as amended by 2009/136/EC), often called the 'Cookie Directive', and the GDPR (Regulation 2016/679). Article 5(3) of the ePrivacy Directive requires prior consent for storing cookies, while GDPR Articles 6 and 7 define lawful consent requirements. National implementations vary by country.

Browse case links on this page

Cookie Consent Enforcement Actions (227 total)