Is this illegal in GDPR countries (EU + Norway + ...) or am I reading GDPR wrong?
"If informed consent is used as the lawful basis for processing, consent must have been explicit for data collected and each purpose data is used for"
"If informed consent is used as the lawful basis for processing, consent must have been explicit for data collected and each purpose data is used for"
I don't see the word "personal" in this sentence, only "any data collection". It's clearly not in the users' interest/benefit to activate this data collection, and not required for the normal functioning of the browser/websites. So activating this silently is minimum _very unethical_ and probably illegal, but I'm not a lawyer.