I'd like to remind everyone talking about GDPR that cookie banners aren't even necessary under GDPR if you simply do not use tracking cookies on your website.
I use Consent-o-matic - https://consentomatic.au.dk/
Websites (eg their owners) can get slapped with an uncapped penalty fee that is ambiguously oriented around a company’s sales volume - disregarding that this could even bankrupt companies (as sales don’t mean net earnings).
Both artifacts (extra territoriality and severity) are extremely bold, something completely unique and unheard of from the EU, especially when fiddling around with American Businesses.
Which makes one wonder how a nobody like Jan Philipp Albrecht [1] came into a position to single handedly ruin browsing UX for the whole world.
Did he actually benefit US interests? Or that of the American cookie oligarchy (Meta, Google, Amazon, …)? After all he is a member of the Greens, which sort of have a history of being bought off from Washington [2].
[1] https://en.m.wikipedia.org/wiki/Jan_Philipp_Albrecht
[2] https://www.telepolis.de/features/Cem-Oezdemir-Der-gruene-US...
They were sick of US megacorps breaking laws and paying pitifull fines after a decade in court. It was more profitable to break the law and pay the fine.