Cookie Consent Fines & Enforcement Actions
Browse European DPA enforcement actions targeting cookie consent and ePrivacy violations. Filter fines, warnings, and orders by country, violation type, and fine amount.
Selected coverage: Europe. Only published cases are included.
326 results · Showing 226–250
Association des agences de communication
Court case III CZP 78/19
Court case N° 434684
Bundesverband der Verbraucherzentralen und Verbraucherverbände – Verbraucherzentrale Bundesverband e. V.
Pre-ticked Consent Boxes
The State of the Netherlands
Amazon Italia Logistica s.r.l.
VKI
La Quadrature du Net
Dream Land S.r.l.
Microsoft Corporation
Third-Party Cookies Without Consent
Squeezemind S.r.l.
Misleading Banner Messaging
Centralcar S.p.a.
No Reject Button · No Granular Cookie Choice +1
Google LLC
Confalonieri S.r.l.
No Reject Button · Unclear Cookie Information +1
Norsk Helseinformatikk AS
Reject Harder Than Accept · Third-Party Cookies Without Consent +2
G.Glamour
Unclear Cookie Information
Società Onlinestore s.r.l.
No Reject Button · Pre-ticked Consent Boxes +3
DPG Media
Aktiebolaget Trav och Galopp
Reject Harder Than Accept · Misleading Banner Messaging
Freedelity
Mapfre España Compañia de Seguros y Reaseguros SA
Cookies Placed Before Consent · Third-Party Cookies Without Consent
Österreichischer Rundfunk - ORF
No Reject Button · Reject Harder Than Accept +1
RTL Belgium SA
No Reject Button · Misleading Banner Messaging
MediaHuis
No Reject Button · Misleading Banner Messaging +1
Adevinta Spain, S.L.
Frequently Asked Questions About Cookie Enforcement
Q:What are the most common cookie consent violations in Europe?
The most common violations include setting cookies before obtaining user consent, using pre-ticked consent boxes, lacking a clear reject button on cookie banners, making it harder to refuse cookies than to accept them, and failing to provide adequate information about cookie purposes. The French CNIL and Italian Garante have been particularly active in enforcing these requirements.
Q:Which European countries issue the most cookie consent fines?
France (CNIL), Italy (Garante), and Spain (AEPD) consistently lead in cookie consent enforcement. France has issued some of the largest fines, including multi-million euro penalties against major tech companies for cookie consent violations under both GDPR and the ePrivacy Directive.
Q:What is the average cookie consent fine in Europe?
Cookie consent fines vary enormously, from a few thousand euros for small businesses to hundreds of millions for large tech companies. The median fine for cookie-specific violations tends to be lower than general GDPR fines, but landmark cases like CNIL's fines against Google and Amazon have reached EUR 150 million and EUR 35 million respectively.
Q:What laws govern cookie consent in Europe?
Cookie consent in Europe is governed primarily by the ePrivacy Directive (2002/58/EC, as amended by 2009/136/EC), often called the 'Cookie Directive', and the GDPR (Regulation 2016/679). Article 5(3) of the ePrivacy Directive requires prior consent for storing cookies, while GDPR Articles 6 and 7 define lawful consent requirements. National implementations vary by country.
Browse case links on this page
Cookie Consent Enforcement Actions (326 total)
- Association des agences de communication (France) – court ruling – Jun 2020
- Court case III CZP 78/19 (Poland) – court ruling – Aug 2020
- Court case N° 434684 (France) – court ruling – Jun 2020
- Bundesverband der Verbraucherzentralen und Verbraucherverbände – Verbraucherzentrale Bundesverband e. V. (Germany) – court ruling – May 2020 | Pre-ticked Consent Boxes
- The State of the Netherlands (Netherlands) – court ruling – Jan 2020
- Amazon Italia Logistica s.r.l. (Italy) – violation found – Feb 2026
- VKI (Austria) – court ruling – Nov 2019
- La Quadrature du Net (France) – court ruling – Oct 2019
- Dream Land S.r.l. (Italy) – violation found – Dec 2025
- Microsoft Corporation (Austria) – complaint upheld – Jan 2026 | Third-Party Cookies Without Consent
- Squeezemind S.r.l. (Italy) – violation found – Oct 2025 | Misleading Banner Messaging
- Centralcar S.p.a. (Italy) – violation found – Jun 2025 | No Reject Button, No Granular Cookie Choice, Unclear Cookie Information
- Google LLC (Austria) – complaint upheld – Aug 2025
- Confalonieri S.r.l. (Italy) – violation found – Jun 2025 | No Reject Button, Unclear Cookie Information, Misleading Banner Messaging
- Norsk Helseinformatikk AS (Norway) – violation found – Jun 2025 | Reject Harder Than Accept, Third-Party Cookies Without Consent, Misleading Banner Messaging, Unclear Cookie Information
- G.Glamour (Italy) – complaint upheld – Nov 2024 | Unclear Cookie Information
- Società Onlinestore s.r.l. (Italy) – violation found – Oct 2024 | No Reject Button, Pre-ticked Consent Boxes, Cookies Persist After Rejection, Unclear Cookie Information, No Granular Cookie Choice
- DPG Media (Belgium) – order – Jan 2025
- Aktiebolaget Trav och Galopp (Sweden) – complaint upheld – Dec 2024 | Reject Harder Than Accept, Misleading Banner Messaging
- Freedelity (Belgium) – violation found – Nov 2024
- Mapfre España Compañia de Seguros y Reaseguros SA (Spain) – complaint upheld – Oct 2024 | Cookies Placed Before Consent, Third-Party Cookies Without Consent
- Österreichischer Rundfunk - ORF (Austria) – complaint upheld – Oct 2024 | No Reject Button, Reject Harder Than Accept, Cookies Placed Before Consent
- RTL Belgium SA (Belgium) – complaint upheld – Oct 2024 | No Reject Button, Misleading Banner Messaging
- MediaHuis (Belgium) – complaint upheld – Sept 2024 | No Reject Button, Misleading Banner Messaging, Cannot Withdraw Cookie Consent
- Adevinta Spain, S.L. (Spain) – dismissed – Apr 2024