Security & Privacy
How many cookie consent banners are clicked every day? (EU)
GDPR puts a cookie banner in front of nearly every EU site visit. On 2023 figures, 404 million EU users see about 1,020 of them a year, at 5 seconds each. That adds up to 575 million hours and €14.4 billion in lost productivity, the equivalent of 287,500 full-time workers doing nothing but clicking "Accept". A privacy law that created a job nobody applied for.
Roughly 13K clicks every second.
Source: Legiscope 2023 analysis; GDPR/ePrivacy Directive.
Last checked: 18 October 2026
What cookie consent actually gives you - and what it doesn't
You have seen this banner thousands of times. A box appears. It says something about cookies and privacy. You click "Accept all" because rejecting or customising takes three more clicks. Consent-management research finds acceptance rates above 90% on many major sites when rejection is buried. That is the cookie-banner cousin of the dark patterns the Norwegian Consumer Council documented in 2018 for Facebook, Google, and Windows privacy settings, not for website cookie banners. GDPR intended informed choice. The design often delivers something else.
What you are actually consenting to when you click "Accept all" is the deployment of tracking cookies that follow your behaviour across hundreds or thousands of sites, building a profile used to target advertising. That consent is legally valid. Most users have no real idea what they just agreed to.
The alternative, clicking "Manage preferences," can take 30 seconds or more, and the interface is often intentionally confusing. Most people never open that panel. They spend a few seconds hitting Accept, and that is the interaction Legiscope counts: 5 seconds × 412 billion EU banner encounters a year, which is how you get to 575 million hours.
Cookie banners vs. the ads they were designed to regulate, today
Cookie banners and ads compete for the same fraction-of-a-second of user attention. Both are a product of the online tracking ecosystem the GDPR was designed to regulate.
How GDPR created an industry of compliance theatre
- 2011EU ePrivacy Directive (Cookie Law) requires consent for non-essential cookies; first wave of basic cookie banners
- 2018GDPR effective May 25; cookie consent requirements tighten; banners multiply across EU websites
- 2019CJEU Planet49 ruling: pre-ticked cookie consent boxes unlawful; banners must request active consent
- 2022Belgian DPA rules IAB TCF violates GDPR; forces redesign of consent flows for 40,000+ websites
- 2023Legiscope: EU users spend 575 million hours/year on cookie banners; €14.4B productivity drain
- 2025EU Digital Omnibus Regulation proposed (Nov 2025): would eliminate cookie banners for ~60% of websites via browser-level consent; CNIL issues 21 cookie-related sanctions in 2025
- 2027EU Digital Omnibus cookie exemptions expected to take effect; IAB TCF v2.3 compliance; ePrivacy Directive transition ongoing
Key cookie banner statistics
EU internet users collectively spend 575 million hours per year clicking cookie banners, equivalent to €14.4B in lost productivity
LegiscopeThe average EU internet user encounters ~1,020 cookie banners per year (100 sites/month × 12 months × 85% banner rate)
LegiscopeOver 40% of European websites use a Consent Management Platform (CMP); GDPR compliance is the primary driver
Norbert Pohlmann Institute / arXivWhen a "Reject All" button is equally prominent as "Accept All", ~60% of users reject; when rejection requires extra clicks, ~90% accept
Norbert Pohlmann Institute / arXivIAB's TCF framework, used by over 40,000 websites, was itself ruled GDPR non-compliant by the Belgian DPA in February 2022, forcing a major redesign
Consent ObservatoryEU Digital Omnibus Regulation (Nov 2025): proposed reform would eliminate cookie banners for ~60% of websites by 2027–2029 via browser-level consent signals
European CommissionCookie banner volume since GDPR enforcement began
Cookie banners became mandatory across the EU after the GDPR came into force in 2018, and the collective time Europeans now spend clicking them has grown to over 575 million hours per year, roughly the GDP equivalent of a small country.
| Year | Rate | Est. per day | Context |
|---|---|---|---|
| 2018 | 50K/min | 72M | Pre-enforcement; banner quality inconsistent |
| 2020 | 120K/min | 173M | Banner proliferation; enforcement begins |
| 2023 | 783K/min | 1.1B | Mature banner regime; enforcement peak |
| 2027 (forecast) | 266K/min | 383M | More countries adopting GDPR-style regulations; banner interactions grow |
The GDPR consent theatre: why cookie banners cost €14 billion per year
The cost of consent
Cookie banners were not anticipated by GDPR drafters as a meaningful burden. The regulation was designed to prevent silent data harvesting, not to require active acknowledgement of every page load. However, the combination of broad consent requirements, advertising-driven business models, and a lack of standardised browser-level consent mechanisms resulted in an explosion of banner implementations. The GDPR's 'freely given, specific, informed and unambiguous' consent standard, strictly interpreted, precludes pre-ticked boxes and bundled consents, leading to complex multi-layer designs that slow page loads and frustrate users.
Dark patterns and enforcement
Multiple studies have documented widespread dark pattern use in cookie banners: burying "Reject All" behind multiple clicks, using bright colours for "Accept" and grey for "Reject", presenting walls of legal text, and pre-selecting all cookies. French regulator CNIL issued 21 sanctions for cookie/consent failures in 2025 alone. The November 2025 EU Digital Omnibus Regulation proposal (COM(2025) 837) could fundamentally change this: it would eliminate cookie banners for an estimated 60% of websites by requiring browser-level consent signals, saving EU businesses €1 billion+ annually. If adopted, browser default settings would replace per-site banners from 2027–2029.
Research data
| Year | Finding | Value | Source |
|---|---|---|---|
| 2018 | GDPR takes effect May 25, 2018; cookie banners proliferate across EU websites; initial enforcement light | GDPR effective date | Consent Observatory |
| 2020 | Large-scale study of cookie banner design patterns; ~95% of top EU websites have a consent banner; dark patterns widespread | 95 % of major EU sites with banner (2020) | Norbert Pohlmann Institute / arXiv |
| 2022 | Belgian DPA rules IAB TCF violates GDPR; 40,000+ websites must redesign consent flows; enforcement accelerates across EU | Enforcement milestone 2022 | Consent Observatory |
| 2023 | Legiscope: 404M EU internet users × 1,020 banners/year × 5 seconds = 575 million hours/year; €14.4B productivity loss | 575M EU hours/year on cookie banners (2023) | Legiscope |
| 2024 | IAB TCF Compliance Report 2024: ongoing monitoring of CMP compliance; TCF v2.2 adoption complete; TCF v2.3 update due 2026 | TCF compliance status 2024 | Consent Observatory |
| 2025 | EU Digital Omnibus Regulation (COM(2025) 837, Nov 19 2025): proposes to eliminate cookie banners for ~60% of websites by requiring browser-level consent signals; EU businesses spend ~€1.64B/year on cookie compliance; potential annual savings of €1B+ by 2029 | 60 % of websites that may no longer need banners | European Commission |
In perspective
575 million hours/year is equivalent to 287,500 full-time employees doing nothing but clicking cookie consent buttons all year
At €14.4 billion annually, the time EU users lose to cookie banners is worth more than the GDP of several small European nations (Legiscope, 2023 estimate)
Frequently asked questions
- How many cookie banners does the average EU user click per year?
- A Legiscope 2023 estimate calculates approximately 1,020 cookie banner interactions per EU internet user per year, based on visiting ~100 websites/month and ~85% of those displaying a consent banner. At 5 seconds per banner, that totals ~1.42 hours per year per user.
- How much productivity does the EU lose to cookie banners?
- Legiscope estimates 575 million hours per year of EU citizens' time spent on cookie consent interactions, worth approximately €14.4 billion in productivity at the average European hourly wage of €25. This is roughly 0.10% of total EU GDP.
- Do users actually read cookie banners before clicking?
- Most users do not. When a "Reject All" button requires extra clicks vs. "Accept All", acceptance rates jump from about 40% to over 90%. Dark patterns (asymmetric button placement, pre-ticked boxes, buried reject options) manipulate consent, which is why regulators have been imposing increasingly strict design requirements.
Cite this rate
AnythingCounter derived rate, last checked October 2026: about 783,240 clicks per minute (about 1.1 billion clicks per day).
Method: Based on Legiscope 2023, converted to a per-minute rate (daily total ÷ 1,440).
Suggested citation: AnythingCounter, "Cookie banner clicks (EU)," October 2026, https://anythingcounter.com/cookie-banners-per-day
Primary source: Legiscope.
How this number is calculated, and how much to trust it
Legiscope 2023 analysis: 404 million EU internet users × 1,020 banners/year = 412 billion interactions/year ÷ 31,557,600 seconds = approximately 13,054 banner clicks/second. Converting to hours of time: 412 billion × 5 seconds ÷ 3,600 ≈ 572 million hours/year (Legiscope reports ~575 million). The 1,020 banners/year estimate uses 100 sites/month × 12 months × 85% showing banners.
Legiscope's methodology is transparent and has been cited by the European Data Protection Board (EDPB) and referenced in EU Parliament discussions about the ePrivacy Regulation. The €14.4 billion GDP cost figure uses Eurostat average EU hourly wage data.
Sources: see below. More detail on our methodology page.
Sources
Consent Observatory - EU Cookie Consent Research - A Large-Scale Study of Cookie Banner Interaction Tools and Their Impact on Users' Privacy - Legiscope - Cookie banners: 575 million hours.
Worth a look... Phishing emails - Online scam victims - Ads blocked.