Search

Following several hundred noyb complaints against companies that use questionable consent banners, the European Data Protection Board established a "cookie banner taskforce" in September 2021. In January 2023, the taskforce then published a report offering its opinion and recommendations regarding the different kind of violations found in consent banners. With its new Consent Banner Report, noyb compared the taskforce's findings with the positions taken by national DPAs in guidance documents and actual decisions. This can be a helpful resources for companies implementing consent banners.

When the GDPR came into force in 2018, the new and shiny data protection law was hailed as a shift towards stricter enforcement – ensuring that in the EU, the fundamental right to data protection does not only exist on paper. To mark the Data Protection Day on 28 January 2024, noyb conducted a survey among more than 1000 data protection professionals working in European companies. This provided a unique view from the inside: 70% of respondents believe that authorities need to issue clear decisions and enforce the GDPR to ensure compliance, while 74% say that authorities would find ‘relevant violations’ if they would walk through the door of an average company. In an attempt to move towards “evidence-based enforcement”, this research also shows that authorities would need to fundamentally change their approach to enforcement to get businesses to comply.

This page contains a collection of reports and other resources produced by the noyb team in recent years.

So-called Pay or Okay systems are on the rise in Europe. First introduced by journalistic websites that wanted to boost their consent rates, Meta adopted the approach for Instagram and Facebook in November 2023.

Below, we compiled a number of the most frequently asked questions about Pay or Okay to explain what this is all about and why this approach is dangerous for consent online.