Dutch DPA warns companies over dark patterns in consent banners

The Dutch Data Protection Authority (AP) issued a public warning to companies using deceptive cookie banners and consent interfaces, stating that nudging users toward “accept all” choices violates GDPR requirements for freely given consent. The authority signaled that enforcement actions will follow in 2026 if practices do not change.