Cookie Consent Fines & Enforcement Actions
Browse European DPA enforcement actions targeting cookie consent and ePrivacy violations. Filter fines, warnings, and orders by country, violation type, and fine amount.
Selected coverage: Europe. Only published cases are included.
326 results · Showing 101–125
The Washpoint SL
No Reject Button
Lia's Clothes
Cookies Placed Before Consent · No Reject Button +1
Solo Embrague
Ditta individuale Francesco Gagliardi
Radio Popular S.A.
No Reject Button · Cookies Placed Before Consent +1
Istituto di Istruzione Superiore “G. Renda” di Polistena, Reggio Calabria
DPA case 84/2026
APD (Belgian DPA)
DPA case 2026-0.043.390
Cookies Placed Before Consent
DPA case 10139147
Unclear Cookie Information
DPA case Takeaway B.V. - z2022-04011
Third-Party Cookies Without Consent
DPA case 74/2024
DPA case 37/2024
No Reject Button
DPA case DSB-D130.1174
No Reject Button · Cookies Placed Before Consent +1
DPA case 38/2024
Cannot Withdraw Cookie Consent
DPA case 2022050850
DPA case 521.14877.15
No Reject Button · Misleading Banner Messaging +1
DPA case 2021-31-4871
Misleading Banner Messaging
DPA case 2021-31-5553
Misleading Banner Messaging
DPA case 9782890
Third-Party Cookies Without Consent
DPA case 9788429
Third-Party Cookies Without Consent
DPA case 11/2022
No Granular Cookie Choice · Cookies Persist After Rejection +2
DPA case 2020-1013
Unclear Cookie Information
DPA case ZSPR.440.331.2019.PR.PAM
Third-Party Cookies Without Consent · Unclear Cookie Information
Court of Justice of the European Union
No Reject Button · Cannot Withdraw Cookie Consent +1
Frequently Asked Questions About Cookie Enforcement
Q:What are the most common cookie consent violations in Europe?
The most common violations include setting cookies before obtaining user consent, using pre-ticked consent boxes, lacking a clear reject button on cookie banners, making it harder to refuse cookies than to accept them, and failing to provide adequate information about cookie purposes. The French CNIL and Italian Garante have been particularly active in enforcing these requirements.
Q:Which European countries issue the most cookie consent fines?
France (CNIL), Italy (Garante), and Spain (AEPD) consistently lead in cookie consent enforcement. France has issued some of the largest fines, including multi-million euro penalties against major tech companies for cookie consent violations under both GDPR and the ePrivacy Directive.
Q:What is the average cookie consent fine in Europe?
Cookie consent fines vary enormously, from a few thousand euros for small businesses to hundreds of millions for large tech companies. The median fine for cookie-specific violations tends to be lower than general GDPR fines, but landmark cases like CNIL's fines against Google and Amazon have reached EUR 150 million and EUR 35 million respectively.
Q:What laws govern cookie consent in Europe?
Cookie consent in Europe is governed primarily by the ePrivacy Directive (2002/58/EC, as amended by 2009/136/EC), often called the 'Cookie Directive', and the GDPR (Regulation 2016/679). Article 5(3) of the ePrivacy Directive requires prior consent for storing cookies, while GDPR Articles 6 and 7 define lawful consent requirements. National implementations vary by country.
Browse case links on this page
Cookie Consent Enforcement Actions (326 total)
- The Washpoint SL (Spain) – €2K – Jan 2021 | No Reject Button
- Lia's Clothes (Spain) – €2K – Jan 2022 | Cookies Placed Before Consent, No Reject Button, No Granular Cookie Choice
- Solo Embrague (Spain) – €2K – Mar 2020
- Ditta individuale Francesco Gagliardi (Italy) – €2K – May 2026
- Radio Popular S.A. (Spain) – €1K – Jun 2021 | No Reject Button, Cookies Placed Before Consent, Unclear Cookie Information
- Istituto di Istruzione Superiore “G. Renda” di Polistena, Reggio Calabria (Italy) – €900 – Oct 2022
- DPA case 84/2026 (Belgium) – complaint upheld – Apr 2026
- APD (Belgian DPA) (European Union) – order – May 2026
- DPA case 2026-0.043.390 (Austria) – complaint upheld – Jan 2026 | Cookies Placed Before Consent
- DPA case 10139147 (Italy) – violation found – Apr 2025 | Unclear Cookie Information
- DPA case Takeaway B.V. - z2022-04011 (Netherlands) – complaint upheld – Aug 2024 | Third-Party Cookies Without Consent
- DPA case 74/2024 (Belgium) – complaint upheld – May 2024
- DPA case 37/2024 (Belgium) – dismissed – Feb 2024 | No Reject Button
- DPA case DSB-D130.1174 (Austria) – dismissed – Sept 2023 | No Reject Button, Cookies Placed Before Consent, Unclear Cookie Information
- DPA case 38/2024 (Belgium) – dismissed – Feb 2024 | Cannot Withdraw Cookie Consent
- DPA case 2022050850 (Iceland) – dismissed – Dec 2023
- DPA case 521.14877.15 (Germany) – complaint upheld – Sept 2023 | No Reject Button, Misleading Banner Messaging, Cannot Withdraw Cookie Consent
- DPA case 2021-31-4871 (Denmark) – complaint upheld – Feb 2023 | Misleading Banner Messaging
- DPA case 2021-31-5553 (Denmark) – complaint upheld – Feb 2023 | Misleading Banner Messaging
- DPA case 9782890 (Italy) – complaint upheld – Jun 2022 | Third-Party Cookies Without Consent
- DPA case 9788429 (Italy) – order – Jul 2022 | Third-Party Cookies Without Consent
- DPA case 11/2022 (Belgium) – complaint upheld – Jan 2022 | No Granular Cookie Choice, Cookies Persist After Rejection, No Reject Button, Third-Party Cookies Without Consent
- DPA case 2020-1013 (European Union) – complaint upheld – Jan 2022 | Unclear Cookie Information
- DPA case ZSPR.440.331.2019.PR.PAM (Poland) – complaint upheld – Oct 2021 | Third-Party Cookies Without Consent, Unclear Cookie Information
- Court of Justice of the European Union (European Union) – complaint upheld – May 2021 | No Reject Button, Cannot Withdraw Cookie Consent, Unclear Cookie Information