[Aerolfos]

> Yeah, that kinda dark pattern / malicious compliance junk ought to be straight up illegal.

It is illegal.

> To comply with the regulations governing cookies under the GDPR and the ePrivacy Directive you must:

> [...]

> - Allow users to access your service even if they refuse to allow the use of certain cookies

> - Make it as easy for users to withdraw their consent as it was for them to give their consent in the first place.

7 clicks is not as easy as one "accept all", violating the last point. Not allowing you to dismiss the banner and access the site violates the other point.

The real problem is enforcement, unfortunately.

[dmayle]

I have seen a few occasional sites that are even worse than this one.. Not only don't you get a reject all, you get two classes of settings, the default "types", and "trusted partners", and for trusted partners, about a third of them have what's called "legitimate interest" turned on, which means "we legitimately think we can share your data with this people after leading you to believe we haven't, and that's ok", and there are a hundred or more partners you have to scroll through and disable this for