[csydas]

That's because the cookie dialogues as they are now were never part of the original GDPR and other privacy related bills/acts/whatever.

GDPR requires that consent is as easy to withdraw as it is to give. [0]

That companies have dragged their feet and gone kicking and screaming with cookie banners is irrelevant to the actual law; the EU needs to start cracking down more and more on this to show what it actually means, since it's quite clear that companies are not going to willingly comply with the data consent laws.

So don't blame the politicians on this one, they never gave any requirement for such banners, and in fact specifically mentioned that it must be simple to revoke/deny consent. Companies that didn't want to comply with GDPR and other privacy laws decided to make it as painful as possible for you and I and blame it on the privacy rules.

[0] - https://gdpr-info.eu/art-7-gdpr/