What if it's combined with a data privacy law? Instead of accept-this-cookie-to-track-you ... You would need to opt-in to data privacy, or opt-in to data profit-sharing