By country
Cookie consent rules across Europe
Every EU country implements the ePrivacy rule on cookies in its own law, and national regulators publish their own guidance on what a banner must look like. Pick a country to see its law, regulator, specific expectations and enforcement — each with links to the official source.
What's the same everywhere in the EU
Consent first
Cookies that aren't strictly necessary — analytics, ads, most embeds — need consent before they run.
Real choice
Consent must be freely given, specific, informed and unambiguous: no pre-ticked boxes, no 'by scrolling you agree'.
Easy to withdraw
Visitors must be able to change their mind as easily as they gave consent, and you must be able to prove consent.
European Union
- ATAustriaTKG 2021 § 165
- BEBelgiumAct of 30 July 2018, art. 10/2
- BGBulgariaElectronic Commerce Act, art. 4a
- HRCroatiaElectronic Communications Act
- CYCyprusLaw 112(I)/2004, art. 99(5)
- CZCzechiaAct 127/2005 § 89(3)
- DKDenmarkCookie Executive Order 1148/2011
- EEEstoniaElectronic Communications Act
- FIFinlandAct 917/2014 § 205
- FRFranceLoi Informatique et Libertés, art. 82
- DEGermanyTDDDG § 25
- GRGreeceLaw 3471/2006, art. 4(5)
- HUHungaryAct C of 2003 § 155(4)
- IEIrelandS.I. 336/2011, reg. 5
- ITItalyPrivacy Code, art. 122
- LVLatviaInformation Society Services Law § 7¹
- LTLithuaniaElectronic Communications Law, art. 73(4)
- LULuxembourgAct of 30 May 2005, art. 4(3)(e)
- MTMaltaS.L. 586.01, reg. 5
- NLNetherlandsTelecommunicatiewet art. 11.7a
- PLPolandElectronic Communications Law, art. 399
- PTPortugalLei 41/2004, art. 5
- RORomaniaLaw 506/2004, art. 4(5)
- SKSlovakiaAct 452/2021 § 109(8)
- SISloveniaZEKom-2, art. 225
- ESSpainLSSI art. 22.2
- SESwedenLEK (2022:482) 9 kap. 28 §
Outside the EU
Sources checked 28 October 2026. These pages summarise official guidance and aren't legal advice.