Court decides "Pay or Okay" on DerStandard.at is illegal

Cookies Consent Supervisory Authorities Processing Monitoring

Aug 18, 2025Sourcenoyb.eu

Full text

Cookie Banners The Austrian Federal Administrative Court (BVwG) has confirmed an earlier decision by the Austrian Data Protection Authority (DSB) that the Austrian newspaper DerStandard violated the GDPR when introducing "Pay or Okay”. The DSB and the Court both held that users must be able to selectively consent or object to each processing purpose. This case will now likely hit the Austrian Supreme Administrative Court – and potentially the Court of Justice. Court decision (DE)on the Complaintsnoyb's "Pay or Okay" Report on the Economics of Online Advertisementnoyb's FAQs on "Pay or Okay"Background. DerStandard is the leading liberal newspaper in Austria and was the first website that introduced a so-called "pay or okay" approach when the GDPR came into force. Instead of giving users a "genuine" choice between agreeing to and rejecting online tracking by hundreds of third parties, it asked users to either consent or pay for a monthly subscription, currently priced at € 9,90.Extreme c

How it connects

Related across sources

451423 French Supreme Court reviews CNIL €35M cookie consent fine against Amazon The French DPA had received a complaint on 28 May 2018 regarding the lawfulness of processing by Amazon Europe Core ('Provider' or 'The company'). The French DPA had forwarded… Supreme Administrative Court Jun 27, 2022 Consent Supervision Cookies

449209 CE asks CJEU if GDPR one-stop-shop applies to ePrivacy cookie consent cases On 7 December 2020, the French DPA (CNIL) imposed two fines totaling € 100 million on Google LLC and Google Ireland Ltd for violating Article 82 of the French Data Protection Act… Jan 28, 2022 Supervision Consent Supervisory Authorities

449212 CE upholds CNIL competence to fine Google €100M for cookies despite no lead authority role On December, 7 2020, the French DPA imposed a financial penalty of 60 Million euros fine against Google LLC and a 40 million euros against Google Ireland Limited in accordance… Mar 4, 2021 Supervision Supervisory Authorities Law Enforcement

3 O 762/19 LG Rostock: Pre-ticked cookie consent boxes invalid under Art 6(1)(a) GDPR The German consumer organisation Bundesverband der Verbraucherzentralen und Verbraucherverbände - Verbraucherzentrale Bundesverband e.V. (vzbv, the claimant) filed a lawsuit… Sep 15, 2020 Consent Legitimate Interest Controllers

C-604/22 IAB Europe v Gegevensbeschermingsautoriteit In Case C-604/22, the Court of Justice of the European Union ruled on a preliminary reference from the Brussels Court of Appeal in proceedings between IAB Europe and the Belgian… CJEU ·Fourth Chamber Mar 7, 2024 Controllers IP Address Personal Data

C-252/21 Meta Platforms v noyb C-252/21 (Meta Platforms (noyb)) CJEU Jan 12, 2023 Supervision IP Address Integrity and Confidentiality Principle