# DSB (Austria) - 2025-0.276.820

- Type: News
- Source: GDPRhub
- Date: 2026-01-07
- Canonical: https://overview.legal/posts/51978
- Topics: Cookies, Right to be Forgotten, Integrity and Confidentiality Principle, Data Subject Rights Exercise Modalities and Procedures, Right to Object, Accountability, Personal Data, Supervisory Authorities, Consent, Law Enforcement

## Summary

An Austrian media company has been fined €6,820 by the Data Protection Authority because it failed to implement a binding instruction to modify the cookie banner on its website. This resulted in delays in providing users with consent options, despite all objections being rejected. The Data Protection Authority imposed a fine of €6,820 on the media company because the cookie banner had not been adjusted to comply with the law, and there was no visually equivalent option for users to reject cookies. The Authority had previously instructed the company to do so, in accordance with Article 58(2)(d) of the GDPR.

## Full text

An Austrian media company has been fined €6,820 by the Data Protection Authority because it failed to implement a legally binding order to modify the cookie banner on its website. This resulted in a delay in users' ability to provide consent, despite all objections being rejected. The Data Protection Authority imposed a fine of €6,820 on a media company for failing to comply with a requirement to implement a visually equivalent option on the cookie banner that allows users to reject cookies. The Data Protection Authority had previously ordered the company to do so, in accordance with Article 58(2)(d) of the GDPR. Summary in English. Summary in English. In August 2021, a complainant filed a complaint with the Austrian Data Protection Authority (DSB), alleging violations of rights derived from the GDPR, including the right to erasure and the right to confidentiality of personal data. After investigation, the DSB rejected the complaint but simultaneously issued a legally binding order requiring the company to modify the cookie banner. The banner was required to allow users to easily and clearly refuse consent at the first level. --- *This content has been automatically translated using machine translation. The original version is available in the source language.* --- *This content was automatically translated using machine translation. The original version is available in the source language.*

## Cited law provisions (1)

### GDPR — gdpr-art-58-par-2-pnt-d-en

to order the controller or processor to bring processing operations into compliance with the provisions of this Regulation, where appropriate, in a specified manner and within a specified period;

---
Generated by overview.legal · https://overview.legal/posts/51978 · 2026-08-22