What happened
In a win for noyb, the Belgian Data Protection Authority (DPA) has turned a previous “settlement” into proper legal orders against four major Belgian news websites requiring them to bring their cookie banners into GDPR compliance.
The sites, operated by Mediahuis, must now add a “reject” button to the first layer of their cookie banners and remove misleading color schemes that pushed users to accept cookies. If Mediahuis does not comply within 45 days, it faces a daily fine of €50,000 per site, potentially adding up to €10 million.
This action follows noyb’s 2023 complaints, which challenged deceptive cookie banners on 15 Belgian news sites. Initially, the DPA closed the case with a €10,000 settlement, without requiring any changes to the unlawful banners.
However, the DPA has now reversed course and issued enforceable legal orders.
Why it matters
This case marks a victory for GDPR enforcement and warns that deceptive cookie practices will no longer be tolerated. Businesses across the EU must ensure their cookie consent mechanisms are fully transparent and compliant, or risk hefty fines and regulatory action.
What happened In a win for noyb, the Belgian Data Protection Authority (DPA) has turned a previous “settlement” into proper legal orders against four major Belgian news websites requiring them to bring their cookie banners into GDPR compliance. The sites, operated by Mediahuis, must now add a “reject” button to the first layer of their […]