News · noyb - European Center for Digital Rights EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

noyb WIN: Belgian DPA “settlement” turned into proper legal orders on deceptive cookie banners

Forced Consent & Consent Bypass Following several noyb complaints from 2023, the Belgian data protection authority has ordered four major Belgian news sites to bring their cookie banners into GDPR compliance.

Consent Supervision Controllers Supervisory Authorities
Sep 12, 2024 Source noyb.eu

Full text

Forced Consent & Consent Bypass Following several noyb complaints from 2023, the Belgian data protection authority has ordered four major Belgian news sites to bring their cookie banners into GDPR compliance. Specifically, De Standaard, Het Nieuwsblad, Het Belang van Limburg and Gazet van Antwerpen must add a “reject” button to the first layer of their cookie banners. In addition, the news sites have been ordered to change the currently misleading colour scheme of the buttons used. If the controller (Mediahuis) fails to comply, it faces a penalty of €50,000 per day per website. Summary of the decision on GDPRhubPress release of the Belgian DPAOriginal noyb complaintsSettlements instead of enforcement. In July 2023, noyb filed complaints against a total of 15 Belgian news websites for using deceptive cookie banners. Although these companies had already been the subject of a DPA investigation in previous years and were found to have failed to comply with the GDPR, they were never ordered

How it connects

Related across sources

C-46/23 Budapest Főváros IV. Kerület Újpest Önkormányzat Polgármesteri Hivatala v Nemzeti Adatvédelmi és Információszabadság Hatóság In a preliminary ruling requested by the Budapest High Court, the Court of Justice interpreted whether Article 58(2)(d) and (g) of the GDPR permits a national supervisory… Fifth Chamber Mar 14, 2024 Right to be Forgotten Personal Data Right to Restriction
C-169/23 Nemzeti Adatvédelmi és Információszabadság Hatóság v UC In Case C-169/23, the Court of Justice of the European Union (Third Chamber) ruled on a preliminary reference from the Kúria (Hungary) concerning whether the Budapest Metropolitan… Third Chamber Nov 28, 2024 Personal Data Legitimate Interest Supervision
C-645/19 Facebook Ireland Ltd and Others v Gegevensbeschermingsautoriteit In Case C-645/19, the Court of Justice of the European Union (Grand Chamber) addressed a preliminary ruling from the Brussels Court of Appeal concerning Facebook Ireland Ltd and… Grand Chamber Jun 15, 2021 Supervision Supervisory Authorities Controllers
C-60/22 UZ v Bundesrepublik Deutschland In Case C-60/22, the CJEU (Fifth Chamber) ruled on a preliminary reference from the Verwaltungsgericht Wiesbaden concerning UZ, a third-country national, and the Bundesrepublik… Fifth Chamber May 4, 2023 Right to Restriction Right to be Forgotten Personal Data
C-252/21 Meta Platforms v noyb C-252/21 (Meta Platforms (noyb)) Jan 12, 2023 Supervisory Authorities IP Address Supervision
C-231/22 État belge v Autorité de protection des données In Case C-231/22, the Court of Justice of the European Union interpreted Article 4(7) and Article 5(2) of the GDPR in response to a preliminary reference from the Brussels Court… Third Chamber Jan 11, 2024 Controllers Personal Data Public Authority
Related documents