If that interpretation is correct, how can websites like lemonde.fr propose to either accept all cookies or get a paid subscription, under the GDPR?
Is that actually illegal? Or am I missing a difference with what you're describing?
Is that actually illegal? Or am I missing a difference with what you're describing?
The other is that GDPR is still 'enforcement-limited', and there are many organizations that simply violate GDPR - the fact that some organization has done something for years and has not yet been forced to change their ways does not imply that what they do is permitted by GDPR; it's just that the enforcement of GDPR for the trickier parts like online services (as opposed to the important services in physical world, employment, real estate and renting, banking, telecommunications, medicine, etc which were prioritized and are now highly compliant) is starting with the larger violators like Meta, other companies would be handled afterwards, and since news companies are 'politically sensitive' I'd expect that lemonde.fr would be among the very, very last on the regulator's list.