Go to Wolters Kluwer VitalLaw.comGo to Wolters Kluwer VitalLaw.com
VitalLaw®
  • Find answers to your questions
  • Log in to access your subscriptions
In depth. On point.
In depth. On point.
  • Home
  • Legal Directory
  • Home
  • Legal Directory
In depth. On point.
  • Articles
    • Articles
  • Law Firms
    • Law Firms
  • Organizations
    • Organizations
    • Policy Blueprint for Trump Presidency Calls for Forceful Cyber Counter-Attacks
    • Dutch Drug Store Owner Fined for Cookie Violations
    • E.D. Wis.: Final approval for Advocate Aurora Health Pixel Litigation settlement granted after attorneys’ fees reduced
    • FBI, Ofcom Discuss SS7 Security Issues With FCC
    • FTC Amends Kochava Privacy Complaint to Add Subsidiary
    • Kaspersky to Close U.S. Business After Commerce Department Ban
    • Latvian DPA Seeks Comments on Proposed DPIA Guidelines
    • New Data Privacy Bill Introduced in Pennsylvania Senate
    • New Zealand DPA Launches Online Privacy Toolkit
    • STRATEGIC PERSPECTIVES: Turkish Firm Outlines New SCC, BCR Requirements
    • Sens. Blumenthal, Hawley Decry AT&T Data Breach, Demand Answers
  • Articles
    • Articles
  • Law Firms
    • Law Firms
  • Organizations
    • Organizations

    Cybersecurity Policy Report, Dutch Drug Store Owner Fined for Cookie Violations, (Jul 16, 2024)

    By Tony Foley

    The Dutch data protection authority, Autoriteit Persoonsgegevens (AP), has imposed a fine of 600,000 euros ($653,500) against the parent company of drug store Kruidvat based on allegations that the company followed visitors to Kruidvat’s websi ...

    By Tony Foley

    The Dutch data protection authority, Autoriteit Persoonsgegevens (AP), has imposed a fine of 600,000 euros ($653,500) against the parent company of drug store Kruidvat based on allegations that the company followed visitors to Kruidvat’s website with tracking cookies without their knowledge or permission.

    In today’s announcement, AP said the parent company, AS Watson Health & Beauty Continental Europe BV, collected data from website visitors and was able to create personal profiles of the affected individuals, including location data, the pages they visited, products they added to shopping carts, and recommendations clicked on. This, in turn, created specific and invasive profiles of people visiting the Kruidvat website that included highly sensitive information, it said.

    AP said the site should have asked visitors for permission to place cookies on their computers in order to comply with Dutch data protection law regarding consent. In its cookie banner, the consent boxes provided by Kruidvat were checked by default, in direct violation of the law. Visitors who wished to refuse cookies had to go through several steps to avoid giving consent. As a result, AP concluded that the data of visitors to the Kuridvat.nl website had their personal data processed illegally.

    AS Watson Health & Beauty has appealed the decision, which may be accessed from the announcement but is available only in Dutch.

    News: LitigationEnforcement DataPrivacy DataSecurity

    © 2026 CCH Incorporated and its affiliates and licensors. All rights reserved.

    • Manage Cookie Preferences
    • Privacy Statement
    • Terms of Use