In an EU-wide first, Austria's data protection authority DSB ruled that readers can specifically say ‘yes’ or ‘no’ to cookie paywalls, a widely used model by news media that requires readers to consent to data processing practices or pay for a subscription.