Practice 3 minutes read

Why "Reject" belongs on the first layer

No point in consent law is decided so uniformly across borders as this one – and none is ignored so stubbornly. The reasoning is shorter than any defence of the contrary.

The reasoning of the supervisory authorities fits into three sentences. Consent has to be freely given. A decision is free only where both answers are equally reachable. If one answer costs more than the other, the decision is steered and the consent invalid.

How uniformly this is now settled

  1. 2020The European Data Protection Board clarifies that scrolling on is not consent.
  2. 2021The French authority imposes fines in the hundreds of millions – the reason: no equivalent reject button.
  3. 2022The Board's cookie banner taskforce sets out the common line of all supervisory authorities.
  4. 2023German supervisory authorities publish coordinated requirements with the same core point.
  5. 2024Inspections shift from design to the technical implementation of withdrawal.
The agreement is remarkable: different countries, different proceedings, different occasions – and always the same outcome. Betting on a divergent reading today means betting against every decision on record.

What "equally easy" concretely means

  • Same layer. Both answers on the first view, with no intermediate step and no expanding.
  • Same number of clicks. One action here, one action there.
  • Comparable prominence. Similar size, similar contrast, same typeface. Not a button against a faded link.
  • Neutral wording. "Reject" instead of "No thanks, I'll pass on the benefits".
  • Same durability. The refusal is stored for as long as the agreement – not until the next visit.

The objection and the answer to it

What is raised against symmetry

Objection
Answer
"Then almost nobody will agree any more."
The rate does fall. But a coerced agreement was never a valid one – it existed only in the statistics.
"The competition doesn't do it either."
Supervisory authorities examine individual services, not industry averages. And complaints come from individual people.
"Without data nothing can be improved."
Aggregated measurement without recognition is possible and needs no consent.

The last point deserves attention because it often dissolves the dispute. Knowing which pages are read and where visitors come from does not require recognising individuals. Methods that work without accessing the device and yield only aggregated figures need neither consent nor a banner – and they answer most of the questions actually asked in practice.

Published 27 August 2026 · last changed 2 September 2026

This article explains general principles and does not replace legal advice on an individual case.

Back to the overview