Cookie Consent Fines & Enforcement Actions
Browse European DPA enforcement actions targeting cookie consent and ePrivacy violations. Filter fines, warnings, and orders by country, violation type, and fine amount.
Selected coverage: Europe. Only published cases are included.
326 results · Showing 251–275
Maggioli S.p.A.
No Reject Button · Pre-ticked Consent Boxes
Ms. X, represented by noyb - European Center for Digital Rights
No Reject Button · Misleading Banner Messaging +1
C.B. Sistemi s.r.l.
Editoriale Argo S.r.l.
Reti Televisive Italiane S.p.a.
Azienda Ospedaliero Universitaria Città della Salute e della Scienza di Torino
Mrs XX - natural person
Briggs & Stratton LLC
No Reject Button · Reject Harder Than Accept
Google LLC
Istituto Nazionale di Statistica
Dagens Industri Aktiebolag
Coop Sverige AB
Ilmatieteenlaitos
Der Standard
No Granular Cookie Choice
Meta Platforms Inc.
City of Helsinki
Cookies Placed Before Consent · Third-Party Cookies Without Consent +1
JP/Politikens Hus A/S
Misleading Banner Messaging · Unclear Cookie Information
an unnamed data subject
Third-Party Cookies Without Consent
G.O.L. Impresa Sociale S.r.l.
Rights International Spain (RIS)
Alstrøm – Din Isenkræmmer ApS
No Reject Button · Reject Harder Than Accept +1
Pago PA S.p.A
Third-Party Cookies Without Consent · Cookies Placed Before Consent +1
GOOGLE LLC
TikTok
Defendant : Westtoer APB a public entity giving autonomous services in the area of tourism in the province of West -Flanders.
Frequently Asked Questions About Cookie Enforcement
Q:What are the most common cookie consent violations in Europe?
The most common violations include setting cookies before obtaining user consent, using pre-ticked consent boxes, lacking a clear reject button on cookie banners, making it harder to refuse cookies than to accept them, and failing to provide adequate information about cookie purposes. The French CNIL and Italian Garante have been particularly active in enforcing these requirements.
Q:Which European countries issue the most cookie consent fines?
France (CNIL), Italy (Garante), and Spain (AEPD) consistently lead in cookie consent enforcement. France has issued some of the largest fines, including multi-million euro penalties against major tech companies for cookie consent violations under both GDPR and the ePrivacy Directive.
Q:What is the average cookie consent fine in Europe?
Cookie consent fines vary enormously, from a few thousand euros for small businesses to hundreds of millions for large tech companies. The median fine for cookie-specific violations tends to be lower than general GDPR fines, but landmark cases like CNIL's fines against Google and Amazon have reached EUR 150 million and EUR 35 million respectively.
Q:What laws govern cookie consent in Europe?
Cookie consent in Europe is governed primarily by the ePrivacy Directive (2002/58/EC, as amended by 2009/136/EC), often called the 'Cookie Directive', and the GDPR (Regulation 2016/679). Article 5(3) of the ePrivacy Directive requires prior consent for storing cookies, while GDPR Articles 6 and 7 define lawful consent requirements. National implementations vary by country.
Browse case links on this page
Cookie Consent Enforcement Actions (326 total)
- Maggioli S.p.A. (Italy) – complaint upheld – Feb 2023 | No Reject Button, Pre-ticked Consent Boxes
- Ms. X, represented by noyb - European Center for Digital Rights (Belgium) – complaint upheld – Nov 2023 | No Reject Button, Misleading Banner Messaging, Reject Harder Than Accept
- C.B. Sistemi s.r.l. (Italy) – complaint upheld – Nov 2023
- Editoriale Argo S.r.l. (Italy) – complaint upheld – Nov 2023
- Reti Televisive Italiane S.p.a. (Italy) – complaint upheld – Nov 2023
- Azienda Ospedaliero Universitaria Città della Salute e della Scienza di Torino (Italy) – violation found – Oct 2023
- Mrs XX - natural person (Italy) – violation found – Oct 2023
- Briggs & Stratton LLC (Austria) – complaint upheld – Sept 2023 | No Reject Button, Reject Harder Than Accept
- Google LLC (France) – violation found – Jul 2023
- Istituto Nazionale di Statistica (Italy) – violation found – Jun 2023
- Dagens Industri Aktiebolag (Sweden) – complaint upheld – Jun 2023
- Coop Sverige AB (Sweden) – complaint upheld – Jun 2023
- Ilmatieteenlaitos (Finland) – violation found – Apr 2023
- Der Standard (Austria) – complaint upheld – Mar 2023 | No Granular Cookie Choice
- Meta Platforms Inc. (Austria) – complaint upheld – Mar 2023
- City of Helsinki (Finland) – violation found – Dec 2022 | Cookies Placed Before Consent, Third-Party Cookies Without Consent, Unclear Cookie Information
- JP/Politikens Hus A/S (Denmark) – violation found – Oct 2022 | Misleading Banner Messaging, Unclear Cookie Information
- an unnamed data subject (Italy) – complaint upheld – Jul 2022 | Third-Party Cookies Without Consent
- G.O.L. Impresa Sociale S.r.l. (Italy) – violation found – Apr 2022
- Rights International Spain (RIS) (Spain) – no violation – Jan 2022
- Alstrøm – Din Isenkræmmer ApS (Denmark) – complaint upheld – Oct 2021 | No Reject Button, Reject Harder Than Accept, Cookies Placed Before Consent
- Pago PA S.p.A (Italy) – violation found – Jun 2021 | Third-Party Cookies Without Consent, Cookies Placed Before Consent, Unclear Cookie Information
- GOOGLE LLC (France) – violation found – Apr 2021
- TikTok (Italy) – violation found – Mar 2021
- Defendant : Westtoer APB a public entity giving autonomous services in the area of tourism in the province of West -Flanders. (Belgium) – violation found – Feb 2021