That's a lie. If a site does not use cookies, it doesn't need to ask you about them. Similarly, if Adobe doesn't process your files, they don't need to have your permissions.

Precisely zero sites have a legal obligation to post a cookie notice under the GDPR/ePrivacy directive if all they do is use cookies for technically necessary purposes. If they want to track people on the other hand, that's a different story. Adobe should do a MUCH better job at clarifying their legalese and explaining what they can and cannot use data for. A blog post is not a legally binding agreement.

Also, if they want people to trust them with stuff under NDA, they should give people a simple switch that makes sure no Adobe employee or contractor gets to see sensitive documents or files. Or, as a matter of fact, a switch that lets people turn off online features completely. Adobe is not taking their customer's legal responsibilities seriously and this will lead to people needing to cancel subscriptions. (One example, not even NDA-related: transfering PII outside the EU under the GDPR needs special care.)

The icing on the cake is that when I tried a few weeks ago, you couldn't even log in to cancel your service without accepting the new terms.

Cheers: an ex-Adobe customer (please do better Adobe!)

Those sites also do not have a legal requirement to ask you about cookies. Unless of course they insist on tracking you; but that's a choice, not a legal requirement.

No, it is for training AI