overview.legal
More
TopicsLawsCase lawEnforcementGuidanceNews

More sources

Literature Academic articles and books Tools Templates, checklists, calculators

Overviews

This week Everything added in the last 7 days Enforcement dashboard Fines by country, authority and article Coverage What the collection holds, and how current

Work with it

Transit Your processing register as a metro map API & AI tools REST, MCP server, context files Alerts & account Follow topics, get digests
About overview.legal Classic layout
News·noyb - European Center for Digital RightsEN
Export

noyb success: ORF.at must correct misleading cookie banner

This item is a copy of:noyb success: ORF.at must correct misleading cookie banner

Cookie Banners The Austrian Broadcasting Corporation (ORF) must amend its cookie banner on ORF.at to bring it into line with the GDPR.

CookiesConsentSupervisory AuthoritiesMonitoring
May 21, 2026Sourcenoyb.eu

Full text

Cookie Banners The Austrian Broadcasting Corporation (ORF) must amend its cookie banner on ORF.at to bring it into line with the GDPR. This has now been decided by the Federal Administrative Court (BVwG), thereby upholding a decision made by the Austrian Data Protection Authority in 2024. Specifically, the ORF must ensure that the buttons to ‘accept’ or ‘reject’ tracking cookies are designed equally so that visitors are not tricked into agreeing. Currently, the ‘Accept’ option is misleadingly highlighted in colour, which can lead to unintended consent. Federal Administrative Court decision GDPRhubComplaint procedure C037-401Background. In August 2021, noyb lodged 422 GDPR complaints against websites that used misleading and unlawful cookie banners. Among them was ORF.at (the most visited news website in Austria) whose cookie banner at the time did not offer any option to “Reject” tracking cookies on the first level. In its decision of October 2024, the Austrian Data Protection Authorit

How it connects

Related across sources

451423 French Supreme Court reviews CNIL €35M cookie consent fine against Amazon The French DPA had received a complaint on 28 May 2018 regarding the lawfulness of processing by Amazon Europe Core ('Provider' or 'The company'). The French DPA had forwarded… Supreme Administrative Court Jun 27, 2022 Consent Supervision Cookies
449209 CE asks CJEU if GDPR one-stop-shop applies to ePrivacy cookie consent cases On 7 December 2020, the French DPA (CNIL) imposed two fines totaling € 100 million on Google LLC and Google Ireland Ltd for violating Article 82 of the French Data Protection Act… Jan 28, 2022 Supervision Consent Supervisory Authorities
449212 CE upholds CNIL competence to fine Google €100M for cookies despite no lead authority role On December, 7 2020, the French DPA imposed a financial penalty of 60 Million euros fine against Google LLC and a 40 million euros against Google Ireland Limited in accordance… Mar 4, 2021 Supervision Supervisory Authorities Law Enforcement
3 O 762/19 LG Rostock: Pre-ticked cookie consent boxes invalid under Art 6(1)(a) GDPR The German consumer organisation Bundesverband der Verbraucherzentralen und Verbraucherverbände - Verbraucherzentrale Bundesverband e.V. (vzbv, the claimant) filed a lawsuit… Sep 15, 2020 Consent Legitimate Interest Controllers
C-252/21 Meta Platforms v noyb C-252/21 (Meta Platforms (noyb)) CJEU Jan 12, 2023 Supervision IP Address Integrity and Confidentiality Principle
€7M CNIL fines Fnac Darty for tracking app users who declined consent cookies FNAC DARTY PARTICIPATIONS ET SERVICES (FDPS) and FNAC DIRECT (joint controllers) operated a mobile app that offered an online shop. Through trackers on the app, the controller… France ·Art. 5, 82 Oct 22, 2026 Consent Monitoring Personal Data
Related documents