Pay or okay is a consent design in which a website or app gives visitors two ways in: agree to the tracking and profiling that power personalised advertising, or pay a fee to use the service without it. Its formal names are "consent or pay" and "pay or consent"; "pay or okay" is the label coined by its critics, most prominently the Austrian privacy group noyb. The model exists because European law makes most advertising tracking depend on consent, and consent under the General Data Protection Regulation (GDPR) must be freely given. Publishers and platforms wanted a way to keep tracking-funded revenue while still offering a route that does not involve tracking. Whether a price tag on refusal leaves consent "free" is the question regulators and courts have argued over since 2018.

How the choice works

The mechanism sits in the consent management platform (CMP), the software that draws the banner on first visit. In a conventional banner, the visitor can accept, reject or customise. In a pay-or-okay banner, the reject button is replaced by a subscription offer. Accepting writes a consent signal, typically a Transparency and Consent Framework (TCF) string, that tells advertising vendors they may set cookies, build profiles and bid on the impression with personal data. Paying sets up an account, the visitor logs in, and the CMP suppresses the banner and the tracking for that session.

What the payer receives varies. Meta's subscription removes ads entirely from Facebook and Instagram. Many news publishers remove tracking and personalised ads but keep some advertising, which is why German publishers call the product a "PUR" subscription, from the German for "pure". Some sites sell a single cross-publisher pass, run by operators such as contentpass, that covers dozens of titles for one fee.

Prices give a sense of the bargain. Der Standard in Austria charged 6 euros a month when noyb examined it in December 2018, and 9.90 euros by 2025. British outlets including The Times, the Daily Mail and The Independent charged between 1.99 and 6.99 pounds a month, according to PPC Land's report on UK regulator guidance. Schibsted's Norwegian titles add 39 kroner a month for subscribers who decline targeting. Meta's prices, as of March 2026, run from 5.99 euros on the web to 7.99 euros on iOS and Android for a first account.

The economics explain the appeal. A noyb report published on July 24, 2025 found that pay-or-okay banners record consent rates of about 99.9%, against 65% to 85% for banners with a free reject button. Only about 0.1% of users pay. For a publisher, the design converts almost every visitor into a trackable one.

Origin and evolution

The model began with news publishers. Der Standard introduced its PUR subscription in 2018, the year the GDPR took effect, and Austria's data protection authority (DSB) found the offer compatible with the regulation that December. Several German titles, including Der Spiegel, Zeit Online, faz.net and t-online.de, adopted similar walls. noyb filed complaints against faz.net and t-online.de in August 2021 and against Der Spiegel in summer 2021.

Germany's conference of data protection authorities (DSK) set out its position on March 22, 2023: tracking could rest on consent if a tracking-free alternative was offered, "even if this is subject to a charge", provided consent could be given separately for each purpose where several existed.

Meta's route to the model was longer. From May 2018 it relied on contractual necessity to justify behavioural advertising; Ireland's Data Protection Commission rejected that basis with a 390 million euro fine in January 2023. Meta switched to legitimate interest on April 5, 2023. Then, on July 4, 2023, the Court of Justice of the European Union (CJEU) ruled in case C-252/21, Meta Platforms v Bundeskartellamt. At paragraph 150, it said users who refuse data processing not needed for the service should be offered an equivalent alternative, "if necessary for an appropriate fee". Meta read that phrase as permission. On October 30, 2023, it announced a subscription for no ads in Europe, launched in November at 9.99 euros a month on the web and 12.99 euros on mobile, covering the European Union, the European Economic Area and Switzerland.

Regulators answered within months. The European Commission opened Digital Markets Act (DMA) proceedings on March 25, 2024. On April 17, 2024, the European Data Protection Board (EDPB) adopted Opinion 08/2024, finding that most consent-or-pay models used by large platforms do not produce valid consent. "Online platforms should give users a real choice when employing 'consent or pay' models," said Anu Talus, the EDPB's chair. Meta sought annulment of the opinion at the General Court on June 27, 2024, on seven pleas.

In November 2024, Meta cut its prices by about 40% and added a third path, Less Personalised Ads, which Meta says uses 90% less data. The Commission nonetheless fined Meta 200 million euros on April 23, 2025, finding that the binary model in place from March to November 2024 breached the obligation under Article 5(2) to offer a service using less personal data. Meta appealed on July 2, 2025.

Why it matters for advertisers and publishers

For Meta, the choice determines how much behavioural data feeds European auctions. Meta has argued that the Less Personalised Ads option produced an almost 800% rise in ads closed as "irrelevant" or "repetitive" and 70% fewer onsite conversions for small businesses, figures that come from the company and have not been independently verified. Advertisers therefore face two audiences of different quality, with targeting, frequency and measurement behaving differently in each.

For publishers, the stakes are revenue. noyb calculated earnings of 0.24 euros per user a month from tracking-based advertising against 3.24 euros from subscriptions, and argued that pay-or-okay would lift overall press income by just 0.82%. Trade bodies counter that contextual advertising sells at a 50.9% discount to personalised inventory for news publishers and fills about 20% of slots, against 80% to 90% for personalised ads. Nine of them, including IAB Europe and Germany's BVDW, defended the model in submissions to the EDPB on January 16, 2025, arguing that neither the GDPR nor the ePrivacy Directive "aims to dictate business models".

Limitations and disputes

The central dispute is whether consent can be free when refusal costs money. The EDPB's answer, for large platforms, is usually no; it named four tests: conditionality, detriment, imbalance of power and granularity. Its opinion said large platforms should consider a free option without behavioural advertising. Meta argues that the CJEU endorsed a paid alternative and that the EDPB imposed an obligation absent from the GDPR.

National positions diverge. Britain's Information Commissioner's Office allowed consent-or-pay on January 23, 2025, subject to power balance, equivalence, an appropriate fee and clear design. Austria went the other way on granularity: on August 18, 2025, its Federal Administrative Court upheld a ruling that Der Standard's model was unlawful because it allowed only blanket consent or refusal, not choices per purpose. An appeal to the Supreme Administrative Court is possible.

Enforcement is patchy. The Hamburg authority took nearly three years to clear Der Spiegel's banner, and noyb sued the authority on August 1, 2024. In 2025 the group took authorities in Hesse and North Rhine-Westphalia to court over complaints left undecided since 2021. Max Schrems, noyb's honorary chairman, called that "pure political unwillingness to enforce the GDPR against media companies".

Cost to users is a further criticism. noyb estimated that a German refusing tracking across 29 top-100 sites would pay 1,528.87 euros a year. Survey research it cites puts genuine preference for personalised advertising at 0.16% to 7%.

Not the same as

Cookie wall. A wall blocks access unless the visitor consents, with no alternative at all. Pay or okay is a cookie wall with a paid exit, which is why some regulators treat the two differently.

Paywall. A paywall charges for content regardless of consent. In pay or okay, the fee buys freedom from tracking, not access to otherwise locked journalism.

Less personalised ads. Meta's third option is free and still carries advertising, using fewer signals. The DMA case turned on whether such a free, less data-intensive route existed.

Value exchange and freemium. Value exchange describes any trade of attention or data for content, and freemium a free tier upsold to a paid one. Pay or okay is a narrow, legally regulated case of both.

Recent developments

Under threat of periodic penalty payments, Meta committed on December 8, 2025 to present users with an upfront choice between fully and less personalised ads from January 2026. The Commission said "users in the EU must have full and effective choice". Meta's 2026 DMA compliance report, submitted on March 6, 2026, confirmed the new flows and a non-dismissible reminder for undecided users in January 2027. BEUC, the European consumer organisation, said on March 17, 2026 that the January 2026 version still falls short, keeping a binary first screen and adding ad breaks for less personalised users.

Guidance is pending. The Commission and EDPB consulted on joint DMA-GDPR guidelines from October 9 to December 4, 2025, and published more than 100 responses in March 2026; the draft would bar gatekeepers from re-asking for a year after a refusal.

Publishers keep testing the model. noyb and Norway's Consumer Council filed a complaint against Schibsted with Norway's Datatilsynet, as PPC Land reported on June 3, 2026. OpenAI added a variant when ChatGPT ads reached Europe in August 2026: free users can avoid ads by accepting lower message limits rather than paying, a design whose status under the EDPB test is unsettled.

Timeline

  • 2018: Der Standard launches its PUR subscription; Austria's DSB clears it in December
  • May 25, 2018: GDPR applies; Meta relies on contractual necessity for ads
  • August 2021: noyb files complaints against faz.net and t-online.de
  • January 2023: Ireland's DPC fines Meta 390 million euros over contractual necessity
  • March 22, 2023: Germany's DSK accepts PUR models with granular consent
  • April 5, 2023: Meta moves EU behavioural advertising to legitimate interest
  • July 4, 2023: CJEU rules in C-252/21, allowing an alternative "if necessary for an appropriate fee"
  • October 30, 2023: Meta announces subscription for no ads at 9.99 and 12.99 euros
  • March 25, 2024: Commission opens DMA proceedings against Meta
  • April 17, 2024: EDPB adopts Opinion 08/2024
  • June 27, 2024: Meta files annulment action against the opinion
  • July 1, 2024: Commission sends preliminary findings to Meta
  • August 1, 2024: noyb sues the Hamburg DPA over Der Spiegel
  • November 2024: Meta cuts prices about 40% and adds Less Personalised Ads
  • January 23, 2025: UK ICO publishes consent-or-pay guidance
  • April 23, 2025: Commission fines Meta 200 million euros under the DMA
  • July 2, 2025: Meta appeals the DMA decision
  • July 24, 2025: noyb publishes its pay-or-okay report
  • August 18, 2025: Austrian Federal Administrative Court rules against Der Standard
  • October 9, 2025: DMA-GDPR guidelines consultation opens
  • December 8, 2025: Meta commits to an upfront choice from January 2026
  • January 2026: Meta rolls out revised choice flows
  • March 17, 2026: BEUC says Meta's revised model still falls short
  • April 30, 2026: Norway's Datatilsynet criticises Schibsted's opt-out fee
  • June 2026: noyb and Norway's Consumer Council file a complaint against Schibsted
  • August 2026: ChatGPT ads reach Europe with an ad-free, reduced free plan

Summary

Who. Publishers such as Der Standard, Der Spiegel and Schibsted, and platforms led by Meta, which run the model; privacy group noyb and consumer body BEUC, which contest it; and the EDPB, the European Commission, national data protection authorities, the UK ICO and the courts, which judge it.

What. A consent design that replaces the free "reject" option with a paid subscription, so users either accept tracking for personalised advertising or pay to avoid it.

When. Publishers adopted it in 2018. Meta's November 2023 launch made it a pan-European dispute, leading to the EDPB opinion of April 2024, the DMA fine of April 2025 and Meta's revised flows in January 2026.

Where. Mainly the European Union, the European Economic Area and Switzerland, where the GDPR, the ePrivacy Directive and the DMA apply, and Britain, where the ICO permits it under conditions.

Why. Because tracking-based advertising needs freely given consent in Europe. Pay or okay preserves tracking revenue by making refusal costly, which is exactly why critics say the resulting consent is not free.