[anonymousab]

Consent must be obtained for tracking, right? The law requires that it's opt-in?

So when the GDPR is properly enforced and implemented, there should be no difference to the end user between blocking these content elements vs. clicking No or ignoring the element, as the default is that consent has not been given.

[tracker1]

I wonder how many sites actually use the banner's "OK" BEFORE they inject the ads and analytics scripts.

[whizzkid]

Yes, consent must be given, and it should be a positive action. Inaction, pre-checked boxes does not qualify.