That isn't consent under Art. 5 (1) Sentence 1 a GDPR, only acknowledgement of a new Privacy Policy. There needn't be an option to deny it.