> GDPR, ePrivacy, CCPA, UK GDPR, TDDDG, nFADP, LGPD, LOPDGDD: what each privacy law requires for cookies, consent and your banner, with fines and a checklist.
>
> Canonical: https://www.flowconsent.com/en/laws

Cookie laws

# Cookie and consent laws, explained one by one.

Which law applies to your website, what it requires for cookies and consent, who enforces it and what a breach costs. One clear, sourced guide per law.

[Scan my site for free](https://www.flowconsent.com/en/scan) · [See the laws](#lois)

The laws

## Choose the law that applies to you.

Each guide covers the scope, the consent rules, the banner, penalties and a compliance checklist, with links to the official texts.

[GDPR · Opt-in](https://www.flowconsent.com/en/laws/gdpr)

## [GDPR and cookies: what the law requires from your website](https://www.flowconsent.com/en/laws/gdpr)

[- Jurisdiction

  European Union (EEA)- Maximum fine

  €20 million or 4% of worldwide annual turnover, whichever is higher](https://www.flowconsent.com/en/laws/gdpr)

[Read the guide ](https://www.flowconsent.com/en/laws/gdpr)·

[ePrivacy Directive · Opt-in](https://www.flowconsent.com/en/laws/eprivacy-directive)

## [ePrivacy Directive and cookies: the rule behind every consent banner](https://www.flowconsent.com/en/laws/eprivacy-directive)

[- Jurisdiction

  European Union (EEA), through national laws- Maximum fine

  Set by each member state's national law (no EU-wide cap)](https://www.flowconsent.com/en/laws/eprivacy-directive)

[Read the guide ](https://www.flowconsent.com/en/laws/eprivacy-directive)·

[CCPA / CPRA · Opt-out](https://www.flowconsent.com/en/laws/ccpa-cpra)

## [CCPA and CPRA cookies: what California law requires from your website](https://www.flowconsent.com/en/laws/ccpa-cpra)

[- Jurisdiction

  California, United States- Maximum fine

  $2,663 per violation, $7,988 per intentional violation or violation involving minors (2025 adjusted amounts)](https://www.flowconsent.com/en/laws/ccpa-cpra)

[Read the guide ](https://www.flowconsent.com/en/laws/ccpa-cpra)·

[UK GDPR / PECR · Opt-in](https://www.flowconsent.com/en/laws/uk-gdpr-pecr)

## [UK GDPR, PECR and cookies: what UK law requires from your website](https://www.flowconsent.com/en/laws/uk-gdpr-pecr)

[- Jurisdiction

  United Kingdom- Maximum fine

  £17.5 million or 4% of worldwide annual turnover, whichever is higher](https://www.flowconsent.com/en/laws/uk-gdpr-pecr)

[Read the guide ](https://www.flowconsent.com/en/laws/uk-gdpr-pecr)·

[TDDDG · Opt-in](https://www.flowconsent.com/en/laws/tdddg)

## [TDDDG and cookies: what Germany's section 25 requires from your website](https://www.flowconsent.com/en/laws/tdddg)

[- Jurisdiction

  Germany- Maximum fine

  €300,000 per violation of section 25 (GDPR fines can apply on top)](https://www.flowconsent.com/en/laws/tdddg)

[Read the guide ](https://www.flowconsent.com/en/laws/tdddg)·

[nFADP · Opt-out](https://www.flowconsent.com/en/laws/nfadp-switzerland)

## [Swiss nFADP and cookies: what the revised Data Protection Act requires from your website](https://www.flowconsent.com/en/laws/nfadp-switzerland)

[- Jurisdiction

  Switzerland- Maximum fine

  CHF 250,000 criminal fine on the responsible individual (wilful breaches)](https://www.flowconsent.com/en/laws/nfadp-switzerland)

[Read the guide ](https://www.flowconsent.com/en/laws/nfadp-switzerland)·

[LGPD · Mixed](https://www.flowconsent.com/en/laws/lgpd-brazil)

## [LGPD and cookies: what Brazil's data protection law requires from your website](https://www.flowconsent.com/en/laws/lgpd-brazil)

[- Jurisdiction

  Brazil (also applies to foreign companies targeting people in Brazil)- Maximum fine

  2% of revenue in Brazil, capped at R$ 50 million per infraction](https://www.flowconsent.com/en/laws/lgpd-brazil)

[Read the guide ](https://www.flowconsent.com/en/laws/lgpd-brazil)·

[LOPDGDD · Opt-in](https://www.flowconsent.com/en/laws/lopdgdd-spain)

## [LOPDGDD and cookies: what Spanish law requires from your website](https://www.flowconsent.com/en/laws/lopdgdd-spain)

[- Jurisdiction

  Spain- Maximum fine

  €30,000 per LSSI cookie infringement (€150,000 if repeated), up to €20 million or 4% of turnover under the GDPR](https://www.flowconsent.com/en/laws/lopdgdd-spain)

[Read the guide](https://www.flowconsent.com/en/laws/lopdgdd-spain)

These guides explain the law in plain language. They are not legal advice: for a specific situation, consult a lawyer or the competent authority.

## Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

[Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)