Cookie Consent Fines & Enforcement Actions
Browse European DPA enforcement actions targeting cookie consent and ePrivacy violations. Filter fines, warnings, and orders by country, violation type, and fine amount.
Selected coverage: Europe. Only published cases are included.
326 results · Showing 76–100
Papa John's (GB) Limited
Banca popolari di Bari S.p.a.
A.C. Group S.r.l.s.
RCS Mediagroup S.p.a
Regione Molise
Municipality of Modica
Ramona Films, S.L.
No Reject Button · Cookies Placed Before Consent +2
Asociación de Víctimas por Arbitrariedades Judiciales (JAVA)
No Reject Button · Third-Party Cookies Without Consent +1
Conservatorio Santa Cecilia di Roma
Comune di Siracusa
XX (the data subject)
WiPlanet sas di Torri Carlo Alberto
XX
High school in Torre del Greco
Medicina & Lavoro s.r.l.
Ministero degli Interni
Cookies Placed Before Consent
Wallapop S.L.
Cookies Persist After Rejection · Third-Party Cookies Without Consent +1
EDICIONES CATÓLICOS Y VIDA PÚBLICA, S.L.U.
Cookies Placed Before Consent · Cookies Persist After Rejection
Municipality of Thiene
an unnamed data subject
NATURAL LOGISTICS, S.L.
The Royal Clinic by Doctor Marin
Unclear Cookie Information
SYNOBIS MEDICAL S.R.L
Cookies Placed Before Consent · Third-Party Cookies Without Consent +1
BEINNOVA.ES
Vodaphone Romania S.A
Frequently Asked Questions About Cookie Enforcement
Q:What are the most common cookie consent violations in Europe?
The most common violations include setting cookies before obtaining user consent, using pre-ticked consent boxes, lacking a clear reject button on cookie banners, making it harder to refuse cookies than to accept them, and failing to provide adequate information about cookie purposes. The French CNIL and Italian Garante have been particularly active in enforcing these requirements.
Q:Which European countries issue the most cookie consent fines?
France (CNIL), Italy (Garante), and Spain (AEPD) consistently lead in cookie consent enforcement. France has issued some of the largest fines, including multi-million euro penalties against major tech companies for cookie consent violations under both GDPR and the ePrivacy Directive.
Q:What is the average cookie consent fine in Europe?
Cookie consent fines vary enormously, from a few thousand euros for small businesses to hundreds of millions for large tech companies. The median fine for cookie-specific violations tends to be lower than general GDPR fines, but landmark cases like CNIL's fines against Google and Amazon have reached EUR 150 million and EUR 35 million respectively.
Q:What laws govern cookie consent in Europe?
Cookie consent in Europe is governed primarily by the ePrivacy Directive (2002/58/EC, as amended by 2009/136/EC), often called the 'Cookie Directive', and the GDPR (Regulation 2016/679). Article 5(3) of the ePrivacy Directive requires prior consent for storing cookies, while GDPR Articles 6 and 7 define lawful consent requirements. National implementations vary by country.
Browse case links on this page
Cookie Consent Enforcement Actions (326 total)
- Papa John's (GB) Limited (United Kingdom) – €12K – Jun 2021
- Banca popolari di Bari S.p.a. (Italy) – €10K – Mar 2024
- A.C. Group S.r.l.s. (Italy) – €10K – Oct 2023
- RCS Mediagroup S.p.a (Italy) – €10K – Aug 2023
- Regione Molise (Italy) – €10K – Nov 2024
- Municipality of Modica (Italy) – €10K – Jul 2023
- Ramona Films, S.L. (Spain) – €8K – Jan 2022 | No Reject Button, Cookies Placed Before Consent, Unclear Cookie Information, No Granular Cookie Choice
- Asociación de Víctimas por Arbitrariedades Judiciales (JAVA) (Spain) – €8K – Nov 2020 | No Reject Button, Third-Party Cookies Without Consent, Unclear Cookie Information
- Conservatorio Santa Cecilia di Roma (Italy) – €6K – Nov 2022
- Comune di Siracusa (Italy) – €5K – Jan 2024
- XX (the data subject) (Italy) – €5K – Oct 2022
- WiPlanet sas di Torri Carlo Alberto (Italy) – €5K – Feb 2024
- XX (Italy) – €5K – Jul 2020
- High school in Torre del Greco (Italy) – €4K – Jan 2020
- Medicina & Lavoro s.r.l. (Italy) – €4K – Jan 2022
- Ministero degli Interni (Italy) – €4K – Mar 2023 | Cookies Placed Before Consent
- Wallapop S.L. (Spain) – €3K – May 2025 | Cookies Persist After Rejection, Third-Party Cookies Without Consent, Cannot Withdraw Cookie Consent
- EDICIONES CATÓLICOS Y VIDA PÚBLICA, S.L.U. (Spain) – €3K – Jun 2025 | Cookies Placed Before Consent, Cookies Persist After Rejection
- Municipality of Thiene (Italy) – €3K – Sept 2022
- an unnamed data subject (Italy) – €3K – Apr 2022
- NATURAL LOGISTICS, S.L. (Spain) – €3K – Aug 2021
- The Royal Clinic by Doctor Marin (Spain) – €2K – Nov 2020 | Unclear Cookie Information
- SYNOBIS MEDICAL S.R.L (Romania) – €2K – Dec 2024 | Cookies Placed Before Consent, Third-Party Cookies Without Consent, Unclear Cookie Information
- BEINNOVA.ES (Spain) – €2K – Feb 2021
- Vodaphone Romania S.A (Romania) – €2K – Oct 2019