The European Data Protection Supervisor sanctioned the European Parliament for violating regulations on data transfers and cookie consent. The EDPS found fault with a COVID-19 testing website launched by Parliament in September 2020 which attracted complaints over third-party trackers and cookie consent banners that did not meet consent standards. The EDPS ordered Parliament to update the website’s data protection notices related to personal data processing within one month. The EDPS did not issue a financial penalty.