They could not use cookies, they could respect DNT browser setting, they could have not abused tracking technology, and they couldmhave chosen to comply with the law in a user friendly way, instead of user-hostile way.
They didn't. That's why now there is an imperfect law.
* Serve static content with no user-tracking.
* Serve per-user dynamic content, where
* Perform tracking that is essential to the service provided. (e.g. Recording GPS coordinates are essential to the service that Strava offers to users, so no explicit consent is required. Recording GPS coordinates is not essential to the service that Google, Facebook, or Amazon provide, so they must have consent to collect GPS coordinates.)
So if a website is displaying a banner request to track you, it's because that website has made a deliberate choice not to use the other options available.
Not only that, but you have additional options as well.
* Hide each GDPR banner, such as using a custom filter in your ad-blocker. Consent to be tracked must be explicit, and ignoring/hiding a banner is not explicit consent.
* Click the "I reject cookies" button instead. The GDPR requires that it be as easy to retract permission as it is to accept. Since the website has an "I accept cookies" button that only requires one click to complete, they must also have a "I reject cookies" button.
As for when that'll be a reality, they are working on that: https://blog.google/around-the-globe/google-europe/new-cooki...
Shouldn’t they keep track of that?
They could stop selling your data to google, Facebook, etc
Or I guess you could blame the legislation that at least makes it obvious that that’s what they’re doing?