Cookie laws

Cookie and consent laws, explained one by one.

Which law applies to your website, what it requires for cookies and consent, who enforces it and what a breach costs. One clear, sourced guide per law.

The laws

Choose the law that applies to you.

Each guide covers the scope, the consent rules, the banner, penalties and a compliance checklist, with links to the official texts.

GDPROpt-in

GDPR and cookies: what the law requires from your website

Jurisdiction
European Union (EEA)
Maximum fine
€20 million or 4% of worldwide annual turnover, whichever is higher
Read the guide
ePrivacy DirectiveOpt-in

ePrivacy Directive and cookies: the rule behind every consent banner

Jurisdiction
European Union (EEA), through national laws
Maximum fine
Set by each member state's national law (no EU-wide cap)
Read the guide
CCPA / CPRAOpt-out

CCPA and CPRA cookies: what California law requires from your website

Jurisdiction
California, United States
Maximum fine
$2,663 per violation, $7,988 per intentional violation or violation involving minors (2025 adjusted amounts)
Read the guide
UK GDPR / PECROpt-in

UK GDPR, PECR and cookies: what UK law requires from your website

Jurisdiction
United Kingdom
Maximum fine
£17.5 million or 4% of worldwide annual turnover, whichever is higher
Read the guide
TDDDGOpt-in

TDDDG and cookies: what Germany's section 25 requires from your website

Jurisdiction
Germany
Maximum fine
€300,000 per violation of section 25 (GDPR fines can apply on top)
Read the guide
nFADPOpt-out

Swiss nFADP and cookies: what the revised Data Protection Act requires from your website

Jurisdiction
Switzerland
Maximum fine
CHF 250,000 criminal fine on the responsible individual (wilful breaches)
Read the guide
LGPDMixed

LGPD and cookies: what Brazil's data protection law requires from your website

Jurisdiction
Brazil (also applies to foreign companies targeting people in Brazil)
Maximum fine
2% of revenue in Brazil, capped at R$ 50 million per infraction
Read the guide
LOPDGDDOpt-in

LOPDGDD and cookies: what Spanish law requires from your website

Jurisdiction
Spain
Maximum fine
€30,000 per LSSI cookie infringement (€150,000 if repeated), up to €20 million or 4% of turnover under the GDPR
Read the guide

These guides explain the law in plain language. They are not legal advice: for a specific situation, consult a lawyer or the competent authority.

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.