NL EU member state
Cookie consent rules in Netherlands
What Telecommunicatiewet art. 11.7a and the ACM and the AP expect from your cookie banner: when you need consent, how the reject option should look, and what has been enforced.
Sources checked 28 October 2026. Not legal advice.
Cookie law
Telecommunicatiewet (Telecommunications Act), Article 11.7a
Official guidance
Banner languages
Dutch
What the rules say
- Tracking cookies require prior consent; pre-ticked boxes and assumed agreement aren't enough.
- The AP expects 'accept' and 'reject' on the same layer, without extra clicks or a hidden refusal.
- Withdrawing consent must be as easy as giving it.
- Don't mix up consent and legitimate interest in the banner.
- Government websites may not use a cookie wall when visitors refuse cookies.
Analytics exemption
Analytics cookies can be exempt when they're only used to assess the quality or effectiveness of your service and have little or no impact on privacy.
Enforcement examples
2024
The AP fined Coolblue €40,000 for placing cookies without valid consent, including assumed consent and pre-ticked choices.
Source
How PrivacyPill handles this
- Nothing optional runs before a choice. Google tags start with Consent Mode v2 set to denied; other scripts marked with data-pp-category wait until their category is allowed.
- Equal first-layer buttons. "Accept all" and "Reject non-essential" sit side by side with the same weight, and a settings button lets visitors withdraw consent at any time.
- Consent per purpose. Analytics, marketing and functional cookies can be allowed separately in the preferences panel.
- Languages. The banner ships in Dutch, so you're covered.
- Proof of consent. Every choice is logged pseudonymously with the banner version, exportable as CSV.
Frequently asked questions
Sources
- www.acm.nl/en/cookies
- www.autoriteitpersoonsgegevens.nl/themas/internet-slimme-apparaten/cookies/heldere-cookiebanners
- www.autoriteitpersoonsgegevens.nl/en/current/coolblue-fined-for-unsolicited-use-of-cookies
This page summarises official sources checked on 28 October 2026. It isn't legal advice; regulators update guidance, so follow the links for the current text.