This could work for cookies but how would it work for other types of tracking. GDPR is not about cookies per se but about tracking.