It's either don't track or ask for consent. The fact that the industry chooses to track is not on the EU.
It's either don't track or ask for consent. The fact that the industry chooses to track is not on the EU.
Of course this misses a bigger point that tracking in the web moved in a direction that requires no cookies whatsoever, and if anything, feels more pervasive than it ever was.
And it misses the even bigger point, that the morons who legislated cookie consent did not notice either of those two realities. And the same thing is already true with the AI act; the text watermarking is trivially defeated and everyone knows it. And I'd bet it will remain a requirement for the next decade or three.
And the move away from cookies was addressed. That's why we have the GDPR now.
We can always write new regulation, but its important to handle things as they come up and not use technological change as an excuse to do nothing.