TaxxaCompany Logo

Menu

Company

About usCareersBlogContact usLinkedInYouTube

Product

FeaturesPricingFAQ

Legal

Cookie PolicyData Processing AgreementPrivacy PolicyTerms and Conditions
© 2026 Taxxa AI Oy. All rights reserved.
  1. News
  2. /Finland
  3. /IT, Cybersecurity & Data

Finland·Finlex

Otavamedia must offer cookie refusal on the first consent screen

The design steered users towards acceptance. Following IAB Europe’s TCF standard did not prove compliance with cookie rules.

By Taxxa AI Oy · Published 27 August 2026

IT, Cybersecurity & DataLegal & Corporate

Finland’s Supreme Administrative Court has upheld an order requiring Otavamedia Oy to offer refusal of non-essential cookies on the first level of its suomenkuvalehti.fi consent mechanism, alongside acceptance of all cookies.Finlex In KHO:2026:65, the court dismissed the company’s appeal and left the lower court’s outcome unchanged.Finlex The consent mechanism as implemented did not secure a genuinely free choice.Finlex

The first screen offered “Hyväksy kaikki” and “Asetukset”. Acceptance was highlighted in green and allowed users to proceed directly to the website’s content. Refusing non-essential cookies required opening settings, navigating extensive information and finding “Estä kaikki” on the second level. That refusal button did not stand out clearly, while acceptance remained visually emphasised. The first screen did not expressly explain how to refuse or whether the site could be used after refusal.

The Supreme Administrative Court assessed these features together. Acceptance was especially quick and simple, while withholding consent was materially slower and harder. Because users face cookie choices on many websites, even relatively small additional effort can steer them towards consent despite their reservations. The court found that the design improperly influenced freedom to withhold consentFinlex; the differences were not justified by the company’s stated need to provide detailed, specific information.

Otavamedia argued that its mechanism followed the widely used IAB Europe TCF standard. The court held that conformity with a standard did not demonstrate compliance with the applicable rulesFinlex, and it was not established that the standard required this particular implementation. It also rejected the argument that the regulatory decision unjustifiably restricted business freedom or interfered with freedom of expression.

The upheld remedy gives users the refusal option at the first level.Finlex The Supreme Administrative Court’s reasoning rests on the overall design and its effects on choice, including visibility, navigation and emphasis. It declined to request a preliminary ruling from the Court of Justice because there was no justified doubt about the relevant interpretation of EU law.

The underlying consent rule requires consent and understandable, comprehensive information about storage or use; exceptions cover transmission-only purposes and storage or use necessary to provide a service expressly requested by the user. The legal basis is laki sähköisen viestinnän palveluista, sections 205 and 330, read with Directive 2002/58/EC, Articles 2(f) and 5(3), and Regulation (EU) 2016/679, Articles 4(11) and 7(4).

Review refusal visibility, button emphasis and navigation steps in the consent interface so users are not steered into accepting non-essential cookies by a harder refusal route.

Sources

  1. KHO:2026:65

Share with your network

More on this

  1. 27 Aug 2026

    Sanoma must obtain consent for personalisation cookies and certain web calls

  2. 11 Sept 2026

    Vero requires registered signatories for paper refund-account notices

  3. 9 Sept 2026

    Finland adds three jurisdictions to its CRS participation list

  4. 9 Sept 2026

    Vero replaces its Danske tax-payment account with OP from December

  5. 7 Sept 2026

    KHO treats capital loan as debt in executive share-benefit valuation

Finland news