Czech data authority tightens cookie banner audits — how to prepare

Audits are increasing

The Czech Office for Personal Data Protection (UOOU) has significantly increased the number of audits focused on cookie management and consent on websites. The Czech Republic follows the pan-European trend of stricter enforcement of online tracking rules.

Audits target large e-commerce platforms, mid-size businesses, and public institutions alike. The most common findings:

• Pre-ticked consent. A cookie banner with pre-selected categories is not valid consent. GDPR requires an active action from the visitor.
• Unequal buttons. An "Accept all" button visually emphasized over "Reject" — in color, size, and placement.
• Cookies before consent. Analytics and marketing cookies firing before any interaction with the banner.
• Missing rejection option. The visitor has no easy path to reject cookies without friction.
• Outdated cookie policy. Legal documents don't match the actual cookie configuration on the site.

What inspectors look for

During an audit, UOOU typically performs a technical analysis of the website:

1. Network traffic on first visit. What requests are sent before interacting with the cookie banner? Any analytics or marketing request without consent is a violation.
2. Banner visual design. Are both choices (accept/reject) equal-prominence? Is granular choice available without extra clicks?
3. Rejection functionality. What happens after clicking "Reject"? Do all non-essential cookies actually stop?
4. Audit trail. Can you prove consent history? Transaction records with banner version and configuration?
5. Legal documents. Does the cookie policy match the current set of cookies on the site?

How to pass an audit

Waulter handles most requirements by default:

• Equal-prominence buttons — both choices have the same visual weight.
• Automatic cookie blocking before consent.
• Granular choice by processing purpose, not technical category.
• Audit-ready logs with transaction ID for every interaction.
• Auto-generated legal documents matching current configuration.

A proactive approach is cheaper than a fine. Audit your cookie banner today — Waulter shows you where the gaps are.