DSB (Austria) - 2025-0.276.820

}}}} An Austrian media company was fined €6,820 by the Data Protection Authority for negligently failing to implement a binding order to modify its website’s cookie banner, delaying user consent options despite all appeals being rejected.The DPA fined a media company €6,820 for failing to bring its cookie banner into compliance by implementing a visually equivalent option to reject cookies. The DPA previously ordered the controller to do so in accordance with Article 58(2)(d) GDPR. == English Summary ==== English Summary == In August 2021, a data subject filed a complaint with the Austrian Data Protection Authority (DSB), alleging violations of GDPR rights, including the right to erasure and the right to confidentiality of personal data. After investigation, the DSB dismissed the complaint but ex officio issued an order requiring the controller to modify its cookie banner. Specifically, the banner had to allow users to refuse consent on the first level as easily and visibly as they cou