AT EU member state
Cookie consent rules in Austria
What TKG 2021 § 165 and the DSB expect from your cookie banner: when you need consent, how the reject option should look, and what has been enforced.
Sources checked 28 October 2026. Not legal advice.
Cookie law
Telekommunikationsgesetz 2021 (Telecommunications Act 2021), § 165(3)
Official guidance
Banner languages
German
What the rules say
- Prior consent is required before storing or reading non-essential information on a visitor's device.
- No consent is needed for transmission or for strictly necessary services the visitor explicitly requested.
- Consent must meet the GDPR standard — pre-ticked boxes are not valid consent.
- The DSB assesses 'pay or consent' models against the requirement that consent is freely given.
How PrivacyPill handles this
- Nothing optional runs before a choice. Google tags start with Consent Mode v2 set to denied; other scripts marked with data-pp-category wait until their category is allowed.
- Equal first-layer buttons. "Accept all" and "Reject non-essential" sit side by side with the same weight, and a settings button lets visitors withdraw consent at any time.
- Consent per purpose. Analytics, marketing and functional cookies can be allowed separately in the preferences panel.
- Languages. The banner ships in German, so you're covered.
- Proof of consent. Every choice is logged pseudonymously with the banner version, exportable as CSV.
Frequently asked questions
Sources
- dsb.gv.at/faqs/datenschutz-cookies
- www.ris.bka.gv.at/Dokumente/Bundesnormen/NOR40238623/NOR40238623.html
This page summarises official sources checked on 28 October 2026. It isn't legal advice; regulators update guidance, so follow the links for the current text.