Cookie Consent Fines & Enforcement Actions
Browse European DPA enforcement actions targeting cookie consent and ePrivacy violations. Filter fines, warnings, and orders by country, violation type, and fine amount.
Selected coverage: Europe. Only published cases are included.
227 results · Showing 101–125
KFC Restaurants Spain, S.L.U.
Myndoor S.r.l.
Court case W171 2305420-1
No Reject Button · Misleading Banner Messaging +1
Österreichischer Rundfunk - ORF
Reject Harder Than Accept
Court case 4 U 353/24
Lepus Asset Management Oy
Inteligo Media SA
Criteo
ANSPDCP
Cookies Placed Before Consent · Unclear Cookie Information
Court case 6 U 81/23
Third-Party Cookies Without Consent
Der Standard
No Granular Cookie Choice
Meta Platforms Inc.
Court case 10 A 5385/22
Reject Harder Than Accept · Third-Party Cookies Without Consent
Court case 490202
IAB Europe
Unclear Cookie Information
Cookies Placed Before Consent
Court case 6 C 3.23
Court case Ra 2024/04/0424
Reject Harder Than Accept · Pre-ticked Consent Boxes
Court case W298 2274626-1/8E
Cookies Persist After Rejection · Third-Party Cookies Without Consent
Court case W252 2282050-1/12E
Reject Harder Than Accept · Cannot Withdraw Cookie Consent
Court case 1 A 217/22 MD
Court case W 108 2284491-1
No Reject Button · Reject Harder Than Accept +2
Court case W108 2280724-1
Court case 9 O 173/24
Criteo SA
Third-Party Cookies Without Consent
Frequently Asked Questions About Cookie Enforcement
Q:What are the most common cookie consent violations in Europe?
The most common violations include setting cookies before obtaining user consent, using pre-ticked consent boxes, lacking a clear reject button on cookie banners, making it harder to refuse cookies than to accept them, and failing to provide adequate information about cookie purposes. The French CNIL and Italian Garante have been particularly active in enforcing these requirements.
Q:Which European countries issue the most cookie consent fines?
France (CNIL), Italy (Garante), and Spain (AEPD) consistently lead in cookie consent enforcement. France has issued some of the largest fines, including multi-million euro penalties against major tech companies for cookie consent violations under both GDPR and the ePrivacy Directive.
Q:What is the average cookie consent fine in Europe?
Cookie consent fines vary enormously, from a few thousand euros for small businesses to hundreds of millions for large tech companies. The median fine for cookie-specific violations tends to be lower than general GDPR fines, but landmark cases like CNIL's fines against Google and Amazon have reached EUR 150 million and EUR 35 million respectively.
Q:What laws govern cookie consent in Europe?
Cookie consent in Europe is governed primarily by the ePrivacy Directive (2002/58/EC, as amended by 2009/136/EC), often called the 'Cookie Directive', and the GDPR (Regulation 2016/679). Article 5(3) of the ePrivacy Directive requires prior consent for storing cookies, while GDPR Articles 6 and 7 define lawful consent requirements. National implementations vary by country.
Browse case links on this page
Cookie Consent Enforcement Actions (227 total)
- KFC Restaurants Spain, S.L.U. (Spain) – court ruling – Jul 2026
- Myndoor S.r.l. (Italy) – violation found – May 2026
- Court case W171 2305420-1 (Austria) – court ruling – Apr 2026 | No Reject Button, Misleading Banner Messaging, Cookies Placed Before Consent
- Österreichischer Rundfunk - ORF (Austria) – court ruling – Apr 2026 | Reject Harder Than Accept
- Court case 4 U 353/24 (Germany) – court ruling – Apr 2026
- Lepus Asset Management Oy (Finland) – violation found – Mar 2026
- Inteligo Media SA (Romania) – cjeu ruling – Nov 2025
- Criteo (France) – court ruling – Mar 2026
- ANSPDCP (Romania) – court ruling – Jan 2026 | Cookies Placed Before Consent, Unclear Cookie Information
- Court case 6 U 81/23 (Germany) – court ruling – Dec 2025 | Third-Party Cookies Without Consent
- Der Standard (Austria) – court ruling – Aug 2025 | No Granular Cookie Choice
- Meta Platforms Inc. (Germany) – court ruling – Jul 2025
- Court case 10 A 5385/22 (Germany) – court ruling – Mar 2025 | Reject Harder Than Accept, Third-Party Cookies Without Consent
- Court case 490202 (France) – court ruling – May 2025
- IAB Europe (Belgium) – court ruling – May 2025 | Unclear Cookie Information
- LinkedIn (Netherlands) – court ruling – Apr 2025 | Cookies Placed Before Consent
- Court case 6 C 3.23 (Germany) – court ruling – Jan 2025
- Court case Ra 2024/04/0424 (Austria) – court ruling – Jan 2025 | Reject Harder Than Accept, Pre-ticked Consent Boxes
- Court case W298 2274626-1/8E (Austria) – court ruling – Sept 2024 | Cookies Persist After Rejection, Third-Party Cookies Without Consent
- Court case W252 2282050-1/12E (Austria) – court ruling – Nov 2024 | Reject Harder Than Accept, Cannot Withdraw Cookie Consent
- Court case 1 A 217/22 MD (Germany) – court ruling – Mar 2024
- Court case W 108 2284491-1 (Austria) – court ruling – Jul 2024 | No Reject Button, Reject Harder Than Accept, Pre-ticked Consent Boxes, Cookies Placed Before Consent
- Court case W108 2280724-1 (Austria) – court ruling – Jul 2024
- Court case 9 O 173/24 (Germany) – court ruling – Jul 2024
- Criteo SA (Netherlands) – court ruling – Apr 2024 | Third-Party Cookies Without Consent