I agree most of these don't appear necessary, have you thought to contact the DPO, wait 28 days and if no suitable response, contact the ICO? Also, do you hav

I agree most of these don't appear necessary, have you thought to contact the DPO, wait 28 days and if no suitable response, contact the ICO? Also, do you have a link to the EU court guidance? From what I've read before, some functionally necessary and expected cookies don't need consent, but the user may have a right to be informed. For instance, a login cookie might be fine, but arguably only if you have logged in - if it remains after you've logged out then that's a bit worrying.