# [Cookiebot CMP uncovers pharmacy GDPR violations](https://www.cookiebot.com/en/eu-pharmacy-report/) **Cookiebot CMP uncovers pharmacy GDPR violations** · [Try Cookiebot CMP free for 14 days](https://admin.cookiebot.com/signup) · [Scan your website for free to find all cookies and trackers](https://www.cookiebot.com/) --- Using the unique scanning technology at the heart of the Cookiebot consent management platform (CMP), a new special report by Usercentrics uncovers worrying GDPR compliance violations across a privacy-sensitive online industry in the EU. ## Lack of transparency on webshops handling sensitive data In a [new scan report](https://usercentrics.com/resources/pharma-ecommerce-gdpr-compliance/), [Usercentrics](https://usercentrics.com/) scanned **150 popular online pharmacies in 10 EU countries** using the scanning technology of its product [Cookiebot CMP](https://www.cookiebot.com/) and found that **89%** violated the EU’s General Data Protection Regulation (GDPR) by **processing sensitive personal data without the prior and explicit consent of their end-users**, who visit the webshops to browse and buy privacy-sensitive medicines, pharmaceutical products and alternative remedies for their mental and physical health. *Used by: Brand A, Brand B, Brand C* ### Who are the “150 most popular” pharmacy webshops in the EU? The 150 online pharmacies in the research sample scanned by [Cookiebot CMP](https://www.cookiebot.com/) are websites with well-visited webshops, where EU residents shop products ranging from medical and pharmaceutical products to alternative medicines. ### What kind of data is being collected? Personal data generated and processed when EU residents visit these 150 online pharmacies can include: - user purchases, - search and browsing history, - on-site behavior (such as scrolling speed and how their mouse moves), - sites they visited before, - previous web searches, - IP addresses and other identifiers. --- ## User consent is key to successful data-driven business Consumers want more data privacy, so being GDPR compliant is an increasing focus of online businesses. According to [a 2021 study by Cisco](https://www.cisco.com/c/dam/en_us/about/doing_business/trust-center/docs/cisco-cybersecurity-series-2021-cps.pdf?CCID=cc000742&DTID=esootr000875&OID=rptsc027438) – - **79%** of consumers say that **data privacy is a buying factor** for them. - **47%** of consumers say they have **switched companies** over the company’s data policies or data sharing practices. - **19%** of consumers say they **have terminated a relationship** with a retailer, e-commerce websites or online businesses over their data policies or data sharing practices. --- ## Does your website have a CMP? [Cookiebot](https://www.cookiebot.com/) CMP by [Usercentrics](https://usercentrics.com/) helps your website balance data privacy and data-driven business by automating the entire compliance process surrounding cookies, trackers and end-user consent on your domain. The unique scanning technology at the heart of [Cookiebot CMP](https://www.cookiebot.com/) can not only be used to attain compliance with the world’s comprehensive data laws: it can also be used for investigative purposes, such as [this special scan report](https://usercentrics.com/resources/pharma-ecommerce-gdpr-compliance/) uncovering GDPR compliance fails in the EU pharma e-commerce market. ### How does Cookiebot CMP determine “non-compliance”? The way [Cookiebot CMP](https://www.cookiebot.com/) determines non-compliance is to detect whether there are any cookies that are being activated without end-user consent. If any of these cookies can be classified as non-necessary, Cookiebot CMP is able to determine that the website does not meet the compliance requirements of the EU’s GDPR. --- ## About Cookiebot CMP [Cookiebot CMP](https://www.cookiebot.com/) is a tool to help websites of any shape and size balance data privacy and data-driven business for true compliance and better customer relations. Built around an unrivaled scanning technology that detects and controls all cookies and similar tracking technologies on websites, [Cookiebot CMP](https://www.cookiebot.com/) empowers the end-user with transparency and control over their data. --- ## Frequently asked questions How did Usercentrics select the top 150 EU online pharmacy webshops? Usercentrics used the scanning technology of its consent management platform Cookiebot CMP to scan the top 150 online pharmacy websites in the EU. What is ‘personal data’ and ‘sensitive personal data’ under the EU’s GDPR? Under the EU’s GDPR, ‘personal data’ is any kind of information that relates or can in any way be related to an identified or identifiable living person. --- ## Resources * [Download the full Usercentrics pharma e-commerce report](https://usercentrics.com/resources/pharma-ecommerce-gdpr-compliance/) * [2021 Cisco study: Building Consumer Confidence in The Age of Privacy Through Transparency and Control](https://www.cisco.com/c/dam/en_us/about/doing_business/trust-center/docs/cisco-cybersecurity-series-2021-cps.pdf?CCID=cc000742&DTID=esootr000875&OID=rptsc027438) * [Learn more about the EU’s GDPR](https://www.cookiebot.com/en/gdpr/) * [Learn more about cookie consent under the EU’s GDPR](https://www.cookiebot.com/en/cookie-consent/) --- ## Product [Cookiebot™ Consent Solution](https://www.cookiebot.com/en/cookie-consent-solution/) · [Usercentrics for Wix](https://www.cookiebot.com/en/cookiebot-for-wix-by-usercentrics-app/) · [WordPress Plugin](https://www.cookiebot.com/en/new-wp-cookie-plugin/) · [Pricing](https://www.cookiebot.com/en/pricing/) ## Regulations [DMA (EU)](https://www.cookiebot.com/en/digital-markets-act-dma/) · [GDPR (EU)](https://www.cookiebot.com/en/gdpr/) · [CCPA (California)](https://www.cookiebot.com/en/what-is-ccpa/) · [VCDPA (Virginia)](https://www.cookiebot.com/en/virginia-vcdpa/) · [LGPD (Brazil)](https://www.cookiebot.com/en/lgpd/) · [TCF v2.3 (IAB)](https://www.cookiebot.com/en/tcf/) · [Google Consent Mode](https://www.cookiebot.com/en/cookiebot-cmp-google-consent-mode/) · [Microsoft UET Consent Mode](https://www.cookiebot.com/en/microsoft-consent-mode-cmp/) ## Partners [Become an affiliate](https://www.cookiebot.com/en/affiliates/) · [Become a partner](https://www.cookiebot.com/en/resellers/) · [Find a partner](https://www.cookiebot.com/en/cookiebot-reseller/) ## Resources [Blog](https://www.cookiebot.com/en/blog/) · [Digital Markets Act Hub](https://www.cookiebot.com/en/digital-markets-act-dma-resources/) · [Google Consent Mode Hub](https://www.cookiebot.com/en/google-consent-mode-resources/) · [Google Consent Mode V2 Certification](https://courses.usercentrics.com/course/google-consent-mode-v2) · [Google Consent Audit Fixes](https://www.cookiebot.com/en/google-consent-audit-fixes/) · [Developer documentation](https://www.cookiebot.com/en/developer/) · [Cookiebot vs CookieYes](https://www.cookiebot.com/en/cookiebot-best-cookieyes-alternative/) · [Cookiebot vs OneTrust](https://www.cookiebot.com/en/onetrust-alternative/) · [Cookie Banner Cost Calculator](https://www.cookiebot.com/en/cookie-banner-pricing-calculator/) ## Company [About us](https://www.cookiebot.com/en/about/) · [Careers](https://usercentrics.com/career/) · [Support](https://support.cookiebot.com/hc/en-us/) --- [Privacy Policy](https://www.cookiebot.com/en/privacy-policy/) · [Terms of Service](https://www.cookiebot.com/en/terms-of-service/) · [Cookie Declaration](https://www.cookiebot.com/en/cookie-declaration/) · [Data Processing Agreement](https://www.cookiebot.com/en/data-processing-agreement/) ©2026 Cookiebot™ by [Usercentrics](https://usercentrics.com/)