[dessant]

That kind of consent popup is illegal in the EU, please report them to your local DPA. Rejecting data collection must be just as easy as accepting it.

Also watch out for the use of "legitimate interest". I have seen banks trying to deprive customers of their right to refuse data collection, data sharing and marketing messages, claiming legitimate interest.

https://www.theregister.com/2022/02/02/europe_iab_decision/

[dsnr]

Except they left the “legitimate interest” loophole which gets abused by every website.

[MaxBarraclough]

As I understand it, the law provides reasonable limits on what is covered by its legitimate interest provision. Violation of the law is widespread because everyone knows the enforcement is a joke.

See also a rare exception https://news.ycombinator.com/item?id=27060609

[toxik]

Funny, I’ve seen this on multiple government agency websites. This is in Sweden.

[Nextgrid]

> please report them to your local DPA

That requires an unreasonable amount of effort, and at least in the UK the DPA is completely useless, corrupt and/or incompetent.