But the GDPR and ePrivacy directives don't protect us from nefarious cross-site tracking cookies.
Prior to the GDPR, websites just tracked us.
Now they track us AND present an irritating warning that users have learnt to mindlessly "accept"