IN EFFECT since May 25, 2018
Last verified against primary sources:
Cookie Consent (EU ePrivacy)
EU · Effective May 25, 2018
Opt-in consent required for non-essential cookies and trackers in the EU/EEA (ePrivacy Directive + GDPR). Accept and Reject must be equally easy.
Overview
Governed by the ePrivacy Directive (the proposed ePrivacy Regulation was withdrawn around February 2025). The EDPB Cookie Banner Task Force expects equal-prominence Accept/Reject. Enforcement is escalating - France's CNIL fined Google €325M and Shein €150M in September 2025 for cookie violations. A Digital Omnibus proposal may add a one-click reject standard and browser-level consent signals, but is not yet law.
Official text: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32002L0058
See where your app stands
SaaSalyst scans your website in 30 seconds across 118 business readiness checks: compliance signals, security headers, SEO, accessibility, and AI readiness.
Scan Your App