German Data Protection Authority Takes Action Against Non-Compliant Cookie Banners
German Data Protection Authority Takes Action Against Non-Compliant Cookie Banners
TL;DR — Quick Answer
1 min readGerman authorities are enforcing against widespread cookie banner dark patterns including hidden reject buttons and visual manipulation, aligning with EDPB guidance on equal-access consent.
German data protection authorities have intensified enforcement against websites using manipulative or non-compliant cookie banners. The actions target common deceptive design patterns that fail to provide users with genuine choices about tracking.
What Was Found
Authorities identified widespread use of dark patterns in cookie consent interfaces. Common violations included: hiding the reject option behind multiple clicks, using visual design to emphasize the accept button, omitting a reject-all option from the first layer, and pre-selecting tracking categories. These practices produce consent that is not freely given under the GDPR.
The Legal Position
Under both the ePrivacy Directive and the GDPR, cookie consent must result from a genuine, informed choice. Consent obtained through manipulative interfaces is invalid, making any subsequent tracking unlawful. German authorities have aligned with the EDPB's guidance confirming that rejecting cookies must be as easy as accepting them.
Practical Impact
Websites operating in Germany must review their cookie banner implementations to ensure compliance. The enforcement wave reflects a broader European trend toward stricter scrutiny of consent mechanisms. Organizations using consent management platforms should verify that their configurations meet current legal requirements rather than assuming the platform handles compliance automatically.
Was this article helpful?
Let us know what you think!
Before you go...
Related Articles
European Data Protection Board Task Force Targets Deceptive Cookie Banner Designs
The EDPB task force confirmed that most common cookie banner dark patterns are illegal, establishing that rejecting cookies must be as easy as accepting them.
German Court Finds Meta Tracking Pixels Breach GDPR, Opening Door to Mass Lawsuits
A German court ruled Meta's tracking pixels violate GDPR and awarded damages without requiring proof of specific harm, potentially enabling mass litigation across the EU.
Google Analytics Faces Growing Legal Challenges in Germany
German data protection and procurement authorities raise increasing concerns about Google Analytics, joining the broader European enforcement pattern against US-based analytics tools.