In July 2024, the noyb organization, led by Austrian data protection activist and lawyer Max Schrems, published a detailed report examining the decisions and recommendations issued by national data protection authorities regarding website cookie management.
In a decision published in June 2024, Sweden’s data protection authority, Integritetsskyddsmyndigheten (IMY), fined Avanza Bank SEK15 million (EUR 1.3 m) for its alleged use of a tracking pixel to send excessive personal data (information about, for example, customers’ securities holdings and account numbers) to the social media company Meta. The IMY said the bank did not take appropriate security measures under the EU General Data Protection Regulation (GDPR) to prevent the transfer of personal data.
So far, we have mostly read about the gigantic fines imposed by foreign data protection authorities on tech giants (Google, Amazon, Meta) in connection with cookies. Simple website operators have waited until the last possible moment – for economic reasons – to continue their illegal practices without risk.
