Regulatory Watch  /  Austria  /  Interpretation
Low impactInterpretationPublished

Austrian DPA says "Pay or Okay" cookie paywalls must allow specific consent

The Austrian Data Protection Authority partially reversed its earlier stance on the "Pay or Okay" model used by Der Standard, confirming its general permissibility but requiring that users be able to say "yes" or "no" to each specific data processing. The decision does not clarify how a subscription should work when a user declines. The matter may be appealed to the Federal Administrative Court and ultimately the ECJ.

Why it matters: The DPA’s interpretation tightens consent requirements for cookie paywalls, potentially limiting the "Pay or Okay" model across the EU.

Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.

Sources
"Pay or Okay" - the beginning of the end?
noyb · primary source · Apr 11, 2023
"Pay or Okay" - the beginning of the end?
noyb · Apr 11, 2023
Details
JurisdictionAustria
RegulatorAustrian Data Protection Authority (DSB)
LawGeneral Data Protection Regulation
StatusPublished
PublishedApril 11, 2023
Effectivenot stated
OrganisationsDer Standard, noyb
Topicsconsent, cookies, tracking, privacy
Datapersonal