Regulatory Watch  /  European Union  /  Guidance
Moderate impactGuidanceAnnounced

Report flags 'Pay or Okay' consent‑bypass systems as violating GDPR free‑consent requirement

The noyb report documents the spread of “Pay or Okay” systems across Europe, where users must pay to refuse tracking, resulting in near‑universal consent rates that breach the GDPR’s freely‑given consent standard. It cites a July 2023 CJEU ruling that found Meta’s data‑handling illegal and calls on the European Data Protection Board to issue guidance.

Why it matters: The practice undermines GDPR consent rules and may trigger EU‑wide regulatory action.

Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.

Sources
noyb's Pay or Okay report: how companies make you pay for privacy
noyb · primary source · Jul 24, 2025
Details
JurisdictionEuropean Union
RegulatorEuropean Data Protection Board (EDPB)
LawGeneral Data Protection Regulation
StatusAnnounced
PublishedJuly 24, 2025
Effectivenot stated
OrganisationsMeta, newspapers in Austria and Germany
Topicsconsent, targeted advertising, profiling
Datapersonal