Cookie Consent Fines & Enforcement Actions
Browse European DPA enforcement actions targeting cookie consent and ePrivacy violations. Filter fines, warnings, and orders by country, violation type, and fine amount.
Selected coverage: Europe. Only published cases are included.
227 results · Showing 201–225
MF Service S.r.l.
Aller Media AB
Reject Harder Than Accept · Misleading Banner Messaging
State Education Development Agency
Cookies Placed Before Consent · Unclear Cookie Information
Aosom Italy S.r.l.
Unclear Cookie Information · No Granular Cookie Choice
F.C. Copenhagen
Telerama News
Ministero delle Infrastrutture e dei Trasporti
Google LLC
Third-Party Cookies Without Consent
SIA GZ AUTO
No Reject Button · Cookies Placed Before Consent +1
Turner Broadcasting System España, S.L.
No Reject Button · Misleading Banner Messaging +1
Les Editions de l'Avenir Presse
No Reject Button · Misleading Banner Messaging +1
Corina A***
Mediafin
No Reject Button · Reject Harder Than Accept +1
Ministry of Economy, Finance and Industrial and Digital Sovereignty
Associazione ContiamoCI! ETS
CaixaBank S.A.
Reject Harder Than Accept · Cannot Withdraw Cookie Consent
Hearst Magazine Media, Inc.
No Reject Button · Third-Party Cookies Without Consent
Azienda Ospedaliera Universitaria Careggi
GLOBAL KAPITAL GROUP SPAIN, S.L
www.heise.de
Cookies Placed Before Consent · Unclear Cookie Information
Il Sole 24 Ore S.p.a.
Toerisme Vlaanderen
No Reject Button · Unclear Cookie Information
an unnamed professional
Uitvoeringsinstituut Werknemersverzekeringen (UWV)
Barclays Bank Plc
Frequently Asked Questions About Cookie Enforcement
Q:What are the most common cookie consent violations in Europe?
The most common violations include setting cookies before obtaining user consent, using pre-ticked consent boxes, lacking a clear reject button on cookie banners, making it harder to refuse cookies than to accept them, and failing to provide adequate information about cookie purposes. The French CNIL and Italian Garante have been particularly active in enforcing these requirements.
Q:Which European countries issue the most cookie consent fines?
France (CNIL), Italy (Garante), and Spain (AEPD) consistently lead in cookie consent enforcement. France has issued some of the largest fines, including multi-million euro penalties against major tech companies for cookie consent violations under both GDPR and the ePrivacy Directive.
Q:What is the average cookie consent fine in Europe?
Cookie consent fines vary enormously, from a few thousand euros for small businesses to hundreds of millions for large tech companies. The median fine for cookie-specific violations tends to be lower than general GDPR fines, but landmark cases like CNIL's fines against Google and Amazon have reached EUR 150 million and EUR 35 million respectively.
Q:What laws govern cookie consent in Europe?
Cookie consent in Europe is governed primarily by the ePrivacy Directive (2002/58/EC, as amended by 2009/136/EC), often called the 'Cookie Directive', and the GDPR (Regulation 2016/679). Article 5(3) of the ePrivacy Directive requires prior consent for storing cookies, while GDPR Articles 6 and 7 define lawful consent requirements. National implementations vary by country.
Browse case links on this page
Cookie Consent Enforcement Actions (227 total)
- MF Service S.r.l. (Italy) – dismissed – Apr 2025
- Aller Media AB (Sweden) – complaint upheld – Apr 2025 | Reject Harder Than Accept, Misleading Banner Messaging
- State Education Development Agency (Latvia) – violation found – Feb 2025 | Cookies Placed Before Consent, Unclear Cookie Information
- Aosom Italy S.r.l. (Italy) – violation found – Nov 2024 | Unclear Cookie Information, No Granular Cookie Choice
- F.C. Copenhagen (Denmark) – violation found – Dec 2024
- Telerama News (Italy) – violation found – Sept 2024
- Ministero delle Infrastrutture e dei Trasporti (Italy) – order – Jun 2024
- Google LLC (Cyprus) – complaint upheld – Feb 2024 | Third-Party Cookies Without Consent
- SIA GZ AUTO (Latvia) – violation found – Jan 2024 | No Reject Button, Cookies Placed Before Consent, Third-Party Cookies Without Consent
- Turner Broadcasting System España, S.L. (Spain) – dismissed – Mar 2024 | No Reject Button, Misleading Banner Messaging, Cannot Withdraw Cookie Consent
- Les Editions de l'Avenir Presse (Belgium) – order – Dec 2023 | No Reject Button, Misleading Banner Messaging, Cannot Withdraw Cookie Consent
- Corina A*** (Austria) – complaint upheld – Feb 2021
- Mediafin (Belgium) – complaint upheld – Nov 2023 | No Reject Button, Reject Harder Than Accept, Cannot Withdraw Cookie Consent
- Ministry of Economy, Finance and Industrial and Digital Sovereignty (France) – complaint upheld – Nov 2023
- Associazione ContiamoCI! ETS (Italy) – complaint upheld – Aug 2023
- CaixaBank S.A. (Spain) – dismissed – Oct 2023 | Reject Harder Than Accept, Cannot Withdraw Cookie Consent
- Hearst Magazine Media, Inc. (Austria) – complaint upheld – Sept 2023 | No Reject Button, Third-Party Cookies Without Consent
- Azienda Ospedaliera Universitaria Careggi (Italy) – violation found – Jul 2023
- GLOBAL KAPITAL GROUP SPAIN, S.L (Spain) – complaint upheld – Aug 2023
- www.heise.de (Germany) – complaint upheld – May 2023 | Cookies Placed Before Consent, Unclear Cookie Information
- Il Sole 24 Ore S.p.a. (Italy) – complaint upheld – Jan 2023
- Toerisme Vlaanderen (Belgium) – violation found – Nov 2022 | No Reject Button, Unclear Cookie Information
- an unnamed professional (Italy) – complaint upheld – Jun 2022
- Uitvoeringsinstituut Werknemersverzekeringen (UWV) (Netherlands) – complaint upheld – May 2021
- Barclays Bank Plc (Italy) – complaint upheld – Jan 2021