[rizz0]

This is not my experience with GDPR. The short-term response of the ad tech industry has been to not change their ways, but to address this issue with disclaimers. This is where the cookie pop-ups and thoughtless consent interaction patterns come from.

GDPR was never about these pop-ups. It is about getting actual consent.

"By clicking on the button below, you consent with us and our 381 partners to do whatever the hell they want" may be legally acceptable in the US, but in the EU it isn't.

I know for a fact that lawyers and activists are currently challenging these patterns.

Using disclaimers to address GDPR is the short-term solution that was shaped by a US-led ad tech industry to address an EU law. I'd be surprised if 5 years from now these pop-ups are still the norm.