Germany

Do websites need my consent before using cookies?

100% active
Consent must be active
0 pre-checked
No pre-ticked boxes
2022 ruling
BGH precedent year
GDPR Art. 4(11)
Legal definition source
The Short Answer

Yes, websites in Germany must obtain your active, informed consent before placing non-essential cookies. Pre-checked boxes and 'cookie walls' are illegal.

What the Law Says

German data privacy law follows the EU’s General Data Protection Regulation (GDPR) and the ePrivacy Directive, which specifically govern electronic communications and cookie use.

Under EU and German law, websites may only store or access information on your device (e.g., cookies) if you have given clear, informed, and freely given consent — unless the cookies are strictly necessary for the service you requested (e.g., login session cookies).

Consent must be specific, unambiguous, and involve a clear affirmative action — such as clicking ‘Accept’ after reading concise, plain-language information about what cookies are used for and by whom.

‘Implied consent’ (e.g., continuing to browse), pre-checked checkboxes, or blocking access to content unless you accept cookies ('cookie walls') do not meet the legal standard.

What Courts Have Said

Germany’s highest civil court has ruled decisively on cookie consent requirements, reinforcing strict GDPR compliance.

BGH I ZR 223/19
Bundesgerichtshof, 1. Zivilsenat · 2022

Cookie consent requirements under GDPR and ePrivacy Directive. Websites must obtain active, informed consent before setting non-essential cookies. Pre-checked consent boxes and cookie walls that force acceptance are invalid.

What to Do

1

Look for a clear, granular cookie banner that lets you accept or reject non-essential cookies individually.

2

Reject non-essential cookies if you don’t want tracking, advertising, or analytics.

3

Report non-compliant sites to your local data protection authority (e.g., LfDI Baden-Württemberg or BfDI).

Sources

caseBGH I ZR 223/19 — Cookie consent ruling (2022)

Related Questions

What rights do I have under the GDPR in Germany?Can I object to my data being used for advertising?Can I withdraw my consent for data processing at any time?What are the penalties for GDPR violations?

Same Question, Other Jurisdictions

IrelandEuropean UnionUKSouth KoreaCompare all →

Not legal advice. This article is general information based on publicly available sources, written for educational purposes. Laws change and individual situations vary. Consult a licensed attorney in your jurisdiction before acting on anything you read here. Last reviewed: June 2026.