In my layperson's knowledge of GDPR, these awful consent popups always seemed completely illegal:
1. They prevent access without a lengthy/arduous process. Certainly in violation of the spirit of the legislation and almost certainly also the letter.
2. This was of course entirely intentional, in order to annoy users into clicking yes and laying blame on the GDPR
"The GDPR made us annoy you". It doesn't.
3. They often do not allow a single click deny, you have to go through sometimes dozens of vendors and deny them one-by-one. This is so obviously illegal it isn't even funny.4. What's worse, if they do have a "Deny all" button, it's almost certainly there to trick you.
Because they have essentially the same list of trackers duplicated under the "legitimate interest" category. Which "Deny all" won't catch. You have to "object" to the legitimate interest. So if you hit "Deny all", you will instead be tracked by all.
This is so brazen it's almost breathtaking.
Anyway, good to see progress on this front. The ad-industry is still in deep denial about GDPR, thinking that they can continue their business model in the face of it. They can't. Their business model is illegal, and has been since GDPR came into force.The conflict has been brewing for some time now, weaving its way up through the channels.
Exciting times.