[maccard]

> Any site doing this is breaking the law. Report them please.

To who? What do I say? The issue with GDPR is that it's for all intents and purposes unpoliced and unpoliceable unless you happen to have sway with a local regulatory body.

I live in the UK, and ICO are toothless. Ive filed multiple complaints - inability to opt out, misuse of PII for advertising purposes, and each time have received a cookie cutter response telling me to report it to the company and respond to ICO if it's not to my satisfaction. That was the last I heard of every complaint, despite me following up.

[chriswarbo]

It's a shame; but good on you for trying anyway. It's similar to how I treat my vote: not much use on the grand scale of an election; but I need to use it, to avoid undermining any political complaints I have. It's the entry fee to get in the door. What can we do once inside? I'm not sure.

[maccard]

Thanks. I really felt deflated on the second complaint. Amazon sent a voucher for a video game from [e-mail], which was clearly a marketing ploy. I contacted amazon, they said "oh we're sorry you feel that we misused your email", and I contacted ICO, got the cookie cutter response, replied with details, transcripts from amazon, and never heard back.