News · GDPRhub EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

DSB (Austria) - 2025-0.276.820

Cookies Right to be Forgotten Integrity and Confidentiality Principle Data Subject Rights Exercise Modalities and Procedures Right to Object Accountability Personal Data Supervisory Authorities
Jan 7, 2026
Summary

An Austrian media company has been fined €6,820 by the Data Protection Authority because it failed to implement a binding instruction to modify the cookie banner on its website. This resulted in delays in providing users with consent options, despite all objections being rejected. The Data Protection Authority imposed a fine of €6,820 on the media company because the cookie banner had not been adjusted to comply with the law, and there was no visually equivalent option for users to reject cookies. The Authority had previously instructed the company to do so, in accordance with Article 58(2)(d) of the GDPR.

How it connects

References

Related across sources

Guidance Art. 29 WP Guidelines on GDPR transparency requirements (WP260 rev.01) EDPB Case Law Meta Platforms v noyb CJEU Guidance Guidelines 06/2022 on the practical implementation of amicable settlements EDPB Guidance EDPB Annual Report 2021 EDPB Guidance Guidelines 10/2020 on restrictions under Article 23 GDPR EDPB Guidance Guidelines 07/2020 on the concepts of controller and processor in the GDPR EDPB

Full text

An Austrian media company has been fined €6,820 by the Data Protection Authority because it failed to implement a legally binding order to modify the cookie banner on its website. This resulted in a delay in users' ability to provide consent, despite all objections being rejected. The Data Protection Authority imposed a fine of €6,820 on a media company for failing to comply with a requirement to implement a visually equivalent option on the cookie banner that allows users to reject cookies. The Data Protection Authority had previously ordered the company to do so, in accordance with Article 58(2)(d) of the GDPR. Summary in English. Summary in English. In August 2021, a complainant filed a complaint with the Austrian Data Protection Authority (DSB), alleging violations of rights derived from the GDPR, including the right to erasure and the right to confidentiality of personal data. After investigation, the DSB rejected the complaint but simultaneously issued a legally binding order requiring the company to modify the cookie banner. The banner was required to allow users to easily and clearly refuse consent at the first level. --- This content has been automatically translated using machine translation. The original version is available in the source language. --- This content was automatically translated using machine translation. The original version is available in the source language.

Similar Content