I skimmed this [paper](https://epub.wu.ac.at/7523/1/HCIS2020_A%20Human-centric%20Pe...) which, among its main topic, argues the issue being intentional and ubiquitous, but I am unconvinced.
GDPR (which is basically all such acts from across EU in one legislation) has been around since 2016.
If in 2021 your company pretends not to understand the law, your company deserves to be sued into oblivion
some/ most implement directives in cut and paste manner some don't.
No. The fact that the last letter in "GDPR" is not "D" is a pretty good hint that it's not a Directive ;)
It's a Regulation. Regulations apply directly, and are not translated into local law.
But omgitsabird is correct that GDPR is not the relevant basis here, but a clause in French Data Protection Law. And this clause exists because of the ePrivacy Directive.
I hadn't realised that regulations existed in this manner
https://en.wikipedia.org/wiki/Regulation_(European_Union)
so the EU regulations come into Law of all EU countries via "Article 288 of the Treaty on the Functioning of the European Union"