GDPR should have been implemented as a standard that browser vendors should implement. e.g.

``` window.getPersonalDataPreferences() ```

It should only prompt the user to submit their preferences if no preferences were detected, or a specific permission is required to allow certain features.

People may argue that everyone will just turn everything off everywhere and forget about it, and I would argue "so what?".

The burden of GDPR has been dumped on the wrong people and has become so tedious to administer it's basically useless and a massive waste of time and energy.